C7_OPSEC_Guide.pdf

This document is an Operations Security (OPSEC) Guide for Defense Contractors developed by the Naval Undersea Warfare Center Division Keyport (NUWCDIVKPT). The guide provides mandatory compliance requirements for government contractors, including corporations, businesses, and independent contractors awarded work by NUWCDIVKPT and other naval facilities, military installations, and U.S. Navy vessels and aircraft.

The guide establishes three tiers of OPSEC requirements applied based on contract scope and access levels. Section I outlines general contractor OPSEC requirements including restrictions on introducing personal electronic devices into government spaces, prohibitions on discussing government operations in unprotected communications, restrictions on posting sensitive information to company websites or media, and mandatory protection of Critical Information (CI) that includes vulnerabilities of U.S. systems and military operations details. Contractors must remove and conceal government-issued identification when off-station, destroy or return government information upon contract termination, assign an OPSEC Point of Contact for permanent onsite contractors, and receive initial OPSEC awareness training within 30 days of assignment with annual refresher training thereafter. Section II applies OPSEC training requirements to contracts requiring long-term facility access, with training available through computer-based, live, or combined methods. Section III applies to contracts involving production of items with established OPSEC plans or Government Critical Information, requiring contractor-developed OPSEC Plans submitted through the Contracting Officer or Technical Point of Contact for approval by the NUWCDIVKPT Security Office before contract award. All OPSEC compliance costs must be included in contractor proposals as part of the overall cost to provide required supplies or services.