Attachment 2_OPSEC Contract Requirements.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that establishes security protocols and information protection standards for contractors working on federal shipyard projects.

The document outlines mandatory OPSEC procedures to protect sensitive government information from unauthorized disclosure. Contractors are required to implement safeguards for Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI), including personally identifiable information (PII), operation schedules, equipment capabilities, facility locations, and photographs of shipyard work areas. Contractors must not disclose this information through corporate communications, social media, personal email accounts, or public websites. The form specifies that an OPSEC plan is not required for this particular contract (as indicated by the checked box dated 7/7/26), though contractors remain responsible for protecting all sensitive information. Key contractor responsibilities include immediately reporting any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and the Activity Security Manager; properly shredding all shipyard documents using NSA-approved methods; removing and returning all access badges upon contract completion; and restricting verbal discussions about shipyard-related work. Violations of these OPSEC requirements may result in contract termination, criminal prosecution, or civil penalties. The document also addresses Portable Electronic Device (PED) policies, requiring contractors to coordinate with their sponsor before using any transportable devices that can record, store, or transmit data.