N0010426RX19776 Attachment 2_Enclosure 2 PNSY OPSEC_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements specification that outlines security protocols and information protection standards for contractors working at the facility.

The document establishes that OPSEC is a process designed to protect sensitive information from unauthorized disclosure, whether classified or unclassified. An OPSEC Plan is required to record, identify, and monitor contractor OPSEC activities during contract performance, with the plan to be signed by the Prime contractor and forwarded to the contracting official via encrypted email or U.S. Postal Service. However, the document indicates via checked box that an OPSEC Plan is NOT required for this particular contract as of the date 2/3/26. All contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information throughout the contract period.

The document provides comprehensive guidance on Critical Information and Indicators (CII) that require protection, including personally identifiable information, operation schedules, equipment capabilities, facility identification, and photographs within shipyard work areas. Contractors must not publish government CII through corporate communications, social media, or personal email accounts, and must immediately report any unauthorized disclosures or compromises to appropriate security personnel. Additional requirements address Portable Electronic Devices (PEDs), requiring coordination with sponsors regarding device security controls, and Controlled Unclassified Information (CUI) safeguarding through approved shredding methods, badge management, and mandatory reporting of any security incidents to the Activity Security Manager and Industrial Security Officer.