N3904025Q2969 Attachment 3-OPSEC Enclosure 2.pdf

This document is an Operations Security (OPSEC) Contract Requirements attachment for the Portsmouth Naval Shipyard, detailing critical information protection protocols for contractors. The file outlines OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, requiring contractors to avoid inadvertent information leaks during contract performance. Key requirements include protecting Controlled Unclassified Information (CUI), restricting discussions about shipyard-related work, and preventing disclosure of sensitive details such as personally identifiable information, operation schedules, equipment capabilities, and infrastructure specifics.

The document also provides guidance on portable electronic devices, specifying that devices like mobile phones, laptops, digital recorders, and wearable technology are subject to shipyard security controls. Contractors must coordinate device usage with their sponsor and determine approved uses. Critical countermeasures include not posting sensitive information on websites or social media, shredding documents with NSA-approved cross-cut shredders, removing access badges upon contract completion, and immediately reporting any unauthorized information disclosures to the unit sponsor and Activity Security Manager.