N0010425RX19780_Attachment 2_ Enclosure 2 PNSY OPSEC Contract Requirements-Signed-Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that outlines security protocols and information protection obligations for contractors working at the facility.

The document establishes that OPSEC is a process to protect sensitive information from unauthorized disclosure, including classified and unclassified Critical Information and Indicators (CII). Contractors and subcontractors must sign an OPSEC plan prior to contract award, which is transmitted via encrypted email or U.S. Postal Service to the assigned contracting officer. The document indicates that an OPSEC plan is NOT required for this particular contract. Contractors bear responsibility for preventing inadvertent disclosure of classified or unclassified information and protecting Controlled Unclassified Information (CUI) from foreign entities and companies with Foreign Ownership, Control or Influence (FOCI). Contractors must not publish CII in corporate newsletters, trade magazines, displays, websites, or social media, and all media requests must be directed to PNSY Security and Public Affairs. Unauthorized disclosure may result in contract termination, criminal prosecution, and civil penalties.

The document provides specific examples of critical information requiring protection, including Personally Identifiable Information (PII), operational schedules, equipment capabilities, asset identification, facility details, and photographs of shipyard work areas. Countermeasures include prohibiting posting of classified information or CUI on company media, shredding sensitive documents using approved NSA cross-cut shredders, removing badges upon departure, and immediately reporting unauthorized disclosures to the unit sponsor, prime contract officer, and the Activity Security Manager.