Enclosure 2 PNSY OPSEC Contract Requirements _Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, outlining critical security protocols for contractors. The first page details OPSEC as a process to protect sensitive information from unauthorized disclosure, with specific requirements for contractors to avoid inadvertent information compromise. Contractors must safeguard Controlled Unclassified Information (CUI) and be aware that disclosure or compromise of sensitive information could result in criminal prosecution.

The second page provides a Portable Electronic Device (PED) Policy, listing examples of portable devices that may be used and their associated security risks. It outlines Critical Information and Indicators (CII) that must be protected, including personally identifiable information, operational schedules, equipment capabilities, and facility infrastructure details. Contractors are required to implement specific countermeasures such as not posting sensitive information on public websites, shredding critical documents, removing issued badges upon contract completion, and immediately reporting any unauthorized information disclosures.