N3904025Q2958 Attachment 1-OpSec Enclosure.pdf

This is an Operations Security (OPSEC) requirements document from Portsmouth Naval Shipyard that outlines security protocols for contractors. The document defines OPSEC as a process to protect sensitive information (Critical Information and Indicators - CII) from exploitation by adversaries, whether classified or unclassified.

The document details specific requirements including: submission of an OPSEC plan prior to contract start date through encrypted email or SAFE system; restrictions on handling Controlled Unclassified Information (CUI); prohibition of sharing information on social media or personal email accounts; and policies regarding Portable Electronic Devices (PEDs) on shipyard premises. Key sensitive information to be protected includes personally identifiable information, ship repair schedules, equipment capabilities, facility details, and photographs of restricted areas. Contractors must report any unauthorized disclosures immediately and are warned that compromising CII may result in contract termination and criminal/civil penalties. The OPSEC requirements expiration date is listed as 2/11/25.