Attachment 1 PNSY OPSEC Enclosure 2.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that outlines security protocols and information protection standards for contractors and subcontractors working at the facility.

OPSEC is a process designed to protect sensitive information from exploitation by adversaries, with particular focus on Critical Information and Indicators (CII) that require safeguarding whether classified or unclassified. An OPSEC Plan is required to record, identify, and monitor contractor OPSEC activities during contract performance and must be signed by the Prime Contractor and forwarded to the assigned contracting official via encrypted email or postal service. The document indicates that an OPSEC Plan is NOT required for this specific contract, though consideration may be given based on work type and environment. Contractors and subcontractors are responsible for avoiding inadvertent disclosure of classified or unclassified information and protecting all CII in a manner appropriate to its sensitivity.

The document establishes strict prohibitions on publicizing government CII in corporate newsletters, trade magazines, social media, or public websites, with all media requests directed to PNSY Security and Public Affairs for release authority. Critical information examples include personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, facility and asset identification, and photographs or videos within shipyard work areas. Contractors must implement countermeasures including proper document destruction using NSA-approved shredders, badge management protocols, removal of identification badges upon departure, and immediate reporting of any unauthorized disclosures or compromises to the unit sponsor, prime contract officer, and Activity Security Manager. Portable electronic devices are controlled and require coordination with sponsors for approval prior to use on the facility.