N3904025PSE2997 Attachment 1_OPSEC Enclosure 2.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard that outlines critical information protection guidelines for contractors. The document defines OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, whether classified or unclassified, and establishes responsibilities for contractors and subcontractors during contract performance.

The document provides detailed guidance on handling Controlled Unclassified Information (CUI), including specific examples of critical information that must be protected, such as personally identifiable information, operational schedules, equipment capabilities, and asset identification. Contractors are instructed to avoid inadvertent disclosure, restrict discussions about shipyard-related work, and implement specific countermeasures like not posting sensitive information on public websites, shredding documents with approved NSA cross-cut shredders, and reporting any unauthorized information disclosures immediately. The form also includes a policy on Portable Electronic Devices (PEDs), outlining their controlled use and potential security risks.