N3904025Q2959 Attachment 1-Opsec Enclosure 2_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements document from the Portsmouth Naval Shipyard, providing detailed guidelines for contractors regarding sensitive information protection. The document outlines OPSEC as a process to protect sensitive or critical information from unauthorized disclosure, whether classified or unclassified, and establishes specific requirements for contractors and subcontractors.

Key details include mandates for contractors to avoid inadvertent disclosure of sensitive information, with specific prohibitions on publicizing government critical information in corporate newsletters, websites, or social media. The document provides a comprehensive list of critical information and indicators (CII) that must be protected, such as personally identifiable information, operation schedules, equipment capabilities, and infrastructure details. Contractors are required to immediately report any unauthorized disclosures and follow strict guidelines for handling portable electronic devices, including controlling their use, obtaining shipyard guidance, and ensuring security compliance. The document emphasizes potential consequences of information compromise, including possible criminal prosecution and penalties.