Enclosure 2 PNSY OPSEC Contract Requirements 25-206_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements attachment for Portsmouth Naval Shipyard that must be included with solicitation and award packages.

The document establishes OPSEC procedures to protect sensitive unclassified and classified information from unauthorized disclosure. An OPSEC Plan is required to record, identify, and monitor contractor activities during contract performance and must be signed by the Prime Contractor and forwarded to the designated contracting official via encrypted email or U.S. Postal Service through the Department of Defense Safe (DoD) Secure Access File Exchange (SAFE). For this specific contract, the checkbox indicates that an OPSEC Plan is NOT required. Contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified Critical Information and Indicators (CII) and must protect Controlled Unclassified Information (CUI) according to applicable law and policy. Unauthorized disclosure may result in contract removal or termination and criminal prosecution.

The document includes a PNSY Portable Electronic Device (PED) Policy defining controlled devices and their restrictions at the shipyard. It provides specific examples of Critical Information and Indicators that require protection, including personally identifiable information, operation schedules, equipment capabilities, asset identification, and photographs or videos taken in shipyard work areas. Countermeasures specified include prohibiting posting of classified or unclassified information to corporate websites or social media, shredding sensitive documents using NSA-approved equipment, not posting shipyard information on public social media, removing and returning access badges upon contract completion, and immediately reporting unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and Activity Security Manager.