Enclosure 2 PNSY OPSEC Contract Requirements 24-049_Redacted.pdf

This is an Operations Security (OPSEC) Contract Requirements document for Portsmouth Naval Shipyard that outlines security protocols and requirements for contractors. The document defines OPSEC as a process to protect sensitive information, known as Critical Information and Indicators (CII), from exploitation by adversaries.

The document specifies that an OPSEC plan is not required for this contract (indicated by checkbox dated 2/14/24) but details key contractor responsibilities including: protection of CII and Controlled Unclassified Information (CUI), prohibition of sharing sensitive information on social media or personal email accounts, and strict controls on portable electronic devices (PEDs) within the shipyard. Specific sensitive information that must be protected includes personally identifiable information, operation schedules, equipment capabilities, and facility details. Contractors must also follow specific countermeasures such as proper document disposal using NSA-approved shredders, removal of badges during non-work hours, and immediate reporting of any unauthorized disclosures. This security document appears to be an enclosure supporting solicitation N3904025R0004 for Temp HVAC and Insulated Ductwork at Portsmouth Naval Shipyard.