Attachment 3 - OPSEC Enclosure 2.pdf.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that outlines security protocols and information protection obligations for contractors working at the facility.

The document establishes OPSEC as a process to protect sensitive government information from unauthorized disclosure, whether classified or unclassified. An OPSEC plan is required to record, identify, and monitor contractor security activities during contract performance, and must be signed by the Prime contractor and submitted before work begins via encrypted email or U.S. Postal Service. The document indicates that an OPSEC Plan is NOT required for this particular contract, as marked by the authorized official Needham Allen on July 22, 2026. Contractors and subcontractors bear responsibility for preventing inadvertent disclosure of classified or unclassified information, and personnel may be exposed to U.S. Government Critical Information and Indicators (CII) during performance, which cannot be distributed to unauthorized third parties, foreign governments, or companies under foreign ownership, control, or influence.

The document provides specific examples of critical information requiring protection, including personally identifiable information (PII), operation and repair schedules, equipment capabilities and vulnerabilities, facility and asset identification, and photographs or videos from shipyard work areas. Countermeasures prohibit posting classified information or Controlled Unclassified Information (CUI) on public websites, corporate newsletters, or social media; require shredding of sensitive documents using approved NSA equipment; mandate removal and return of access badges upon contract completion; and require immediate reporting of any unauthorized disclosure or suspected compromise to the sponsor, prime contract officer, and Activity Security Manager.