Attachment 1- Enclosure 2 PNSY OPSEC Contract Requirements 25-032.pdf

This document outlines Operations Security (OPSEC) Contract Requirements for Portsmouth Naval Shipyard contractors, detailing procedures for protecting sensitive and critical information. The document explains that OPSEC is a process to protect sensitive information from exploitation by adversaries, with requirements for contractors to submit an OPSEC plan prior to work commencement through secure channels like DoD SAFE or postal service.

The document includes specific policies regarding Portable Electronic Devices (PEDs) and critical information protection measures. Key requirements include: prohibition of sharing classified or controlled unclassified information on corporate websites or social media, restrictions on PED usage within the shipyard, proper handling of personally identifiable information (PII), and protection of sensitive operational details such as ship repair schedules and facility capabilities. Contractors must report any unauthorized disclosures immediately, protect CUI (Controlled Unclassified Information), and ensure proper disposal of sensitive documents using NSA-approved shredders. The document emphasizes that failure to comply may result in contract termination and potential criminal prosecution. The OPSEC plan requirement is marked as "to be determined by the installation work is conducted at" with an authorization date of 2/12/25.