Attachment 2 - OPSEC Form.pdf

This document is an Operations Security (OPSEC) Contract Requirements form issued by Portsmouth Naval Shipyard that outlines security obligations for contractors performing work at the facility.

The form establishes that OPSEC is a protective process designed to safeguard sensitive and critical information from unauthorized disclosure, whether classified or unclassified. An OPSEC plan must be signed by the Prime contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (DoD SAFE) or U.S. Postal Service, though the specific requirement for an OPSEC plan is marked as NOT required for this particular contract. All contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information throughout contract performance. The document identifies critical information and indicators (CII) that require protection, including personally identifiable information (PII), operational schedules, equipment capabilities, asset identification, facility details, photographs, and videos taken within shipyard work areas. Contractors are strictly prohibited from publishing sensitive government information in corporate newsletters, trade magazines, social media, or personal email accounts, and all media requests must be directed to PNSY Security and Public Affairs. Countermeasures require contractors to restrict posting of classified or unclassified sensitive information online, properly shred all sensitive documents using approved NSA crosscut shredders, remove and return access badges upon departure, and immediately report any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and the Activity Security Manager. Violations may result in contract termination, criminal prosecution, and civil penalties.