Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements

This document is an OPSEC Contract Requirements form for Portsmouth Naval Shipyard that establishes security and information protection standards for contractors. The document specifies that OPSEC is a process designed to protect sensitive information, including Critical Information and Indicators (CII), from unauthorized disclosure whether classified or unclassified. Contractors must sign an OPSEC Plan, which records, identifies, and monitors contractor OPSEC activities during contract performance. The OPSEC Plan must be signed by the Prime Contractor and forwarded to the contracting officer via encrypted email through the Department of Defense Safe (DoD SAFE) system or United States Postal Service prior to work commencement. The document indicates via checkbox that an OPSEC Plan is NOT required for this particular contract.

The document outlines contractor responsibilities to prevent inadvertent disclosure of unclassified or classified information and protects Controlled Unclassified Information (CUI) from unauthorized distribution to foreign entities or companies under Foreign Ownership, Control or Influence (FOCI). Contractors must protect CII and restrict publication in corporate newsletters, trade magazines, displays, and social media platforms (Facebook, Instagram, Twitter, LinkedIn). The document provides specific examples of CII that require protection, including personally identifiable information (PII), operation schedules, equipment capabilities, facility identification, asset details, and photographs or videos taken within shipyard work areas. Countermeasures include prohibiting posting of classified or CUI information to company websites, shredding sensitive documents using NSA-approved shredders, removing identification badges upon departure, and immediately reporting any unauthorized disclosure or suspected compromises to the unit sponsor, prime contract officer, and the Activity Security Manager.