N0010425RX19780_Attachment 2_ Enclosure 2 PNSY OPSEC Contract Requirements-Signed-Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form detailing security protocols for contractors working at the facility. The document defines OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, whether classified or unclassified. Contractors are required to avoid inadvertent disclosure of sensitive information during the contract period, with specific guidelines including restrictions on publicizing government critical information, controlling electronic devices, and protecting Controlled Unclassified Information (CUI).

Key responsibilities for contractors include safeguarding Critical Information and Indicators (CII), which encompasses personally identifiable information, operational schedules, equipment capabilities, and asset identification. Contractors must implement strict countermeasures such as not posting sensitive information on websites or social media, shredding documents with approved NSA crosscut shredders, removing badges upon contract completion, and immediately reporting any unauthorized information disclosures. Violations may result in criminal prosecution and imposition of criminal and civil penalties.