N0010426Q19764 Attachment 3 - OPSEC Redacted.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements form that must be attached to all solicitations and awards.

The document establishes OPSEC protocols for contractors working at Portsmouth Naval Shipyard to protect sensitive government information from unauthorized disclosure or compromise. An OPSEC plan is required to record, identify, and monitor contractor OPSEC activities during contract performance, and must be signed by the Prime Contractor and forwarded to the contracting officer via encrypted email or U.S. Postal Service. The form indicates that for this particular contract, an OPSEC Plan is NOT required, though the determination may change based on installation work conducted. Contractors and subcontractors are responsible for protecting both classified and unclassified Critical Information and Indicators (CII) to prevent inadvertent disclosure. CII protection is mandatory and violations may result in criminal prosecution and civil penalties. Unclassified CII includes personally identifiable information, operation schedules, equipment capabilities, asset identification, facility information, and photographs or videos taken within shipyard work areas. Contractors must not publicize government information through corporate communications, social media, or personal email accounts, and must immediately report any unauthorized disclosures or suspected compromises to the Activity Security Manager and Industrial Security Officer. The PNSY Portable Electronic Device (PED) Policy further restricts the use of transportable electronic devices capable of recording, storing, or transmitting data, which require coordination with the sponsor for appropriate guidance and approval.