N3904025Q1002 Enclosure 2 OPSEC.pdf

This is an Operations Security (OPSEC) requirements document from the Portsmouth Naval Shipyard that outlines security protocols for contractors. The document defines OPSEC as a process to protect sensitive information (Critical Information and Indicators - CII) from exploitation by adversaries, whether classified or unclassified.

The document details specific requirements including: the submission of an OPSEC plan prior to contract start date through encrypted email or SAFE file exchange; restrictions on portable electronic devices (PEDs) such as phones, laptops, and recording devices; and explicit prohibition of sharing sensitive information on social media or personal email accounts. Key sensitive information includes personally identifiable information (PII), ship repair schedules, equipment capabilities, facility details, and photographs of shipyard areas. Countermeasures include proper document shredding, badge control procedures, and immediate reporting of unauthorized disclosures. For this specific contract, the OPSEC plan requirement will be determined based on where installation work is conducted, with a date reference of 10/30/24.