N39025Q00006 Attachment 1- OPSEC Form.pdf

This is an Operations Security (OPSEC) requirements document from the Portsmouth Naval Shipyard that outlines security protocols for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, with specific requirements for handling Critical Information and Indicators (CII).

The document details contractor responsibilities regarding information security, including prohibitions on distributing Portsmouth Naval Shipyard CII to unauthorized parties or foreign entities under FOCI. It includes specific policies for Portable Electronic Devices (PEDs) and lists critical information that must be protected, such as personally identifiable information, operation schedules, equipment capabilities, and facility details. Key countermeasures include requirements to shred sensitive documents using NSA-approved crosscut shredders, prohibition of posting classified or CUI information on company websites or social media, and immediate reporting of unauthorized disclosures. For this specific contract, the OPSEC Plan is marked as "NOT required" though contractors must still follow general OPSEC guidelines and PED policies.