Attachment 1 - PNSY OPSEC Enclosure 2.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that outlines critical security protocols and guidelines for contractors working at the facility. The document details OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, whether classified or unclassified, and provides specific instructions for contractors regarding information handling and security measures.

Key requirements include contractors' responsibility to avoid inadvertent disclosure of sensitive information, with strict guidelines on managing Controlled Unclassified Information (CUI). The document lists specific examples of critical information that must be protected, such as personally identifiable information, operation schedules, equipment capabilities, and specific asset identifications. Contractors must also adhere to specific countermeasures like not posting shipyard-related information on public websites, shredding sensitive documents using an approved NSA crosscut shredder, removing badges upon contract completion, and immediately reporting any unauthorized disclosures. The document also includes a policy on portable electronic devices, defining their scope and emphasizing the need to coordinate device usage with the shipyard's security team.