Enclosure 2 OPSEC Redacted_Redacted.pdf

This document contains Portsmouth Naval Shipyard's Operations Security (OPSEC) contract requirements and Portable Electronic Device (PED) policy. The file outlines security protocols for protecting sensitive information, known as Critical Information and Indicators (CII), from unauthorized disclosure.

The document details specific requirements including: restrictions on transmitting U.S. Government CII through personal email accounts or social media; guidelines for handling Controlled Unclassified Information (CUI); and PED policies covering devices like laptops, phones, and digital cameras. Key sensitive information categories include personally identifiable information (PII), operation schedules, ship repair schedules, equipment capabilities, and facility information. Countermeasures include mandatory shredding of sensitive documents using NSA-approved crosscut shredders, proper badge handling procedures, and immediate reporting of unauthorized disclosures. The policy specifies that contractors must coordinate with sponsors regarding PED usage within shipyard facilities and notes that OPSEC violations may result in contract termination and criminal penalties.