Enclosure 2 PNSY OPSEC Contract Requirements 25-206_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements attachment that establishes security protocols and information protection standards for contractors working on federal contracts at the shipyard.

The document defines OPSEC as a process to protect sensitive information from exploitation, particularly Critical Information and Indicators (CII) that require safeguarding whether classified or unclassified. An OPSEC Plan is required to record, identify, and monitor contractor activities; however, this specific contract has been marked as NOT requiring a formal OPSEC Plan, with the checkbox indicating that only basic OPSEC contract requirements apply. Contractors and subcontractors bear responsibility for avoiding inadvertent disclosure of classified or unclassified information throughout contract performance and must protect all Critical Information in a manner appropriate to the information's nature.

The document outlines specific threat/risk examples and corresponding countermeasures for protecting sensitive information. Contractors are prohibited from publicizing government CII through newsletters, trade magazines, internet pages, social media, or personal email accounts. Additional restrictions include prohibitions on discussing PNSY shipyard-related work verbally, photographing restricted areas including drydocks and submarines, and disclosing operation schedules, equipment capabilities, or specific asset identification. Contractors must remove identification badges upon departure, shred sensitive documents using NSA-approved methods, report unauthorized disclosures immediately to their sponsor and Activity Security Manager, and comply with Portable Electronic Device (PED) policies governing the use of cameras, smartphones, and recording devices on shipyard premises. Criminal prosecution and civil penalties may result from disclosure or compromise of CII to unauthorized persons.