N3904025Q2968 Attachment 3-OPSEC Enclosure 2.pdf

This document is an Operations Security (OPSEC) Contract Requirements attachment for the Portsmouth Naval Shipyard, providing critical security guidelines for contractors. The document details OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, whether classified or unclassified. It outlines specific responsibilities for contractors, including avoiding inadvertent disclosure of sensitive information, protecting Controlled Unclassified Information (CUI), and understanding the risks of compromising critical information.

The document includes a detailed Portable Electronic Device (PED) Policy and a Critical Information and Indicators (CII) list, which specifies threat risks and corresponding countermeasures. Key contractor requirements include: not posting classified information on company websites, shredding sensitive documents using an approved NSA crosscut shredder, avoiding social media posts about shipyard work, removing issued badges upon contract completion, and immediately reporting any unauthorized information disclosures. The guidelines cover a wide range of sensitive information types, such as personally identifiable information, operation schedules, equipment capabilities, and facility infrastructure details.