N3904025Q1003 Attachment 3 - OPSEC Enclosure 2 Redacted.pdf

This document is an Operations Security (OPSEC) requirements document from the Portsmouth Naval Shipyard that outlines the policies and procedures for protecting sensitive information. It defines OPSEC as a process to protect Critical Information and Indicators (CII) from exploitation by adversaries, whether classified or unclassified.

The document details specific requirements regarding portable electronic devices (PEDs) and information security protocols. Key requirements include: contractors must submit an OPSEC plan before contract start if required (though in this case it is marked as not required); no distribution of PNSY CII to unauthorized parties or foreign entities; prohibition of sharing information on social media or personal email accounts; strict controls on PEDs including phones, laptops, and other electronic devices; and specific countermeasures such as proper document shredding and badge control. The document identifies critical information types that must be protected, including personally identifiable information, operation schedules, equipment capabilities, and facility details. It establishes reporting requirements for security violations and emphasizes that compromising CII may result in contract termination and legal penalties.