CUI-Enclosure 2 PNSY OPSEC Contract Requirements 24-158_Redacted.pdf

This is an Operations Security (OPSEC) Contract Requirements document from Portsmouth Naval Shipyard that outlines security protocols for protecting sensitive information. The document describes OPSEC as a process to protect Critical Information and Indicators (CII) from unauthorized disclosure, whether classified or unclassified.

The document includes specific policies regarding Portable Electronic Devices (PEDs) and details critical information that must be protected, such as personally identifiable information (PII), operation schedules, ship repair schedules, and equipment capabilities. Key countermeasures include prohibitions on posting classified or controlled unclassified information on company websites or social media, requirements to shred sensitive documents using NSA-approved crosscut shredders, and strict badge control procedures. The document specifies that OPSEC plans must be signed by contractors and submitted through encrypted email or SAFE file exchange prior to contract start. For this particular contract (dated 6/13/24), an OPSEC plan is NOT required, as indicated by the checkmark on the form. The document emphasizes that contractors are responsible for protecting sensitive information and that violations may result in contract termination and criminal penalties.