N3904025Q2933 Attachment 3 OPSEC Enclosure 2.pdf

This is an Operations Security (OPSEC) Contract Requirements document for Portsmouth Naval Shipyard which outlines security protocols and requirements for contractors. The document specifies that for this particular contract, an OPSEC Plan is NOT required, though contractors must still follow basic OPSEC requirements to protect sensitive information.

The document details policies for protecting Critical Information and Indicators (CII), including restrictions on portable electronic devices (PEDs) and specific countermeasures. Key requirements include: no distribution of PNSY CII to unauthorized parties or foreign entities, prohibition of sharing information on social media or personal email accounts, proper handling of Controlled Unclassified Information (CUI), and specific protocols for PEDs like laptops, phones, and recording devices. Critical information to be protected includes personally identifiable information, operation schedules, equipment capabilities, facility details, and photographs of shipyard work areas. Contractors must immediately report any unauthorized disclosures to the Activity Security Manager and Industrial Security Officer, with potential criminal and civil penalties for violations.