C7_Att05_OPSEC_Guide.pdf

This is an Operations Security (OPSEC) Guide for Defense Contractors developed by the Naval Undersea Warfare Center Division Keyport (NUWCDIVKPT). The guide provides mandatory security requirements and compliance guidance for government contractors performing work for NUWCDIVKPT and other Department of Defense facilities.

The guide establishes three tiers of OPSEC requirements based on contract scope and access levels. Section I applies minimum requirements for contractors with intermittent or short-term physical access to government facilities, including restrictions on electronic devices, communications security, photography, badge management, and restrictions on public disclosure of sensitive government operations and personnel information. Section II specifies mandatory training requirements, mandating initial OPSEC training within 30 days of assignment and annual refresher training for all personnel with facility access, with contractors responsible for maintaining individual training records. Section III addresses contractor-developed OPSEC plans, required when contracts involve production of items with established OPSEC plans or when developing government critical information, with specific guidance provided via Data Item Descriptor D-MGMT-80934B and mandatory inclusion of internal employee training programs. Contractors must also comply with the National Industrial Security Program Operating Manual (NISPOM) requirements. Costs associated with OPSEC compliance, including encryption software and training, must be incorporated into contract proposals. The document includes comprehensive glossaries and term definitions covering critical information, observables, indicators, threat assessment, countermeasures, and OPSEC-related security classifications. The NUWCDIVKPT OPSEC Program Manager at (360) 396-5345 should be consulted regarding plan applicability and compliance questions.