Enclosure 2 PNSY OPSEC Contract Requirements 26-101 Redacted.pdf

This is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements document that establishes security protocols and information protection standards for contractors performing work at the facility.

The document defines OPSEC as a process designed to protect sensitive and classified information from unauthorized disclosure. An OPSEC Plan is required to document, identify, and monitor contractor security activities during contract performance and must be signed by the Prime Contractor and forwarded to the assigned contracting official via encrypted email or U.S. Postal Service. However, the specific contract references indicate that an OPSEC Plan is NOT required for this particular solicitation. Contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information throughout the contract period. The document prohibits distribution of Portsmouth Naval Shipyard (PNSY) Critical Information and Indicators (CII) to unauthorized third parties, including foreign entities under Foreign Ownership, Control or Influence (FOCI). CII examples include personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, facility identification, and photographs or videos within shipyard work areas. Contractors must refrain from publicizing government CII through corporate communications, trade magazines, social media, or personal email accounts, with media requests directed to PNSY Security and Public Affairs. The document also addresses Portable Electronic Devices (PEDs), requiring coordination with sponsors regarding approved devices before use on the shipyard. Unauthorized disclosure of CII may result in contract termination, criminal prosecution, and civil penalties. All incidents of compromise or suspected compromise must be reported immediately to the Activity Security Manager and Industrial Security Officer.