OPSEC Contract Requirements.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, outlining critical security protocols for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation, requiring contractors to avoid inadvertent disclosure of classified or unclassified information during contract performance. Key requirements include protecting Controlled Unclassified Information (CUI), restricting discussions about shipyard-related work, limiting photography and documentation of shipyard areas, and immediately reporting any unauthorized information disclosures.

The document also details a Portable Electronic Device (PED) Policy, specifying guidelines for electronic devices like laptops, mobile phones, and wearable technology. Contractors must coordinate device usage with their sponsor and obtain security and IT approval. The policy provides a comprehensive list of Critical Information and Indicators (CII) that are considered sensitive, including personally identifiable information, operational schedules, equipment capabilities, and infrastructure details. Contractors are required to follow strict countermeasures such as not posting sensitive information on public websites, using approved NSA crosscut shredders for document disposal, and returning access badges upon contract completion.