N3904025Q3005 Attachment 2 - OPSEC Contract Requirements.pdf

This document is an Operations Security (OPSEC) Contract Requirements form for the Portsmouth Naval Shipyard, outlining critical security protocols for contractors. The document details OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, whether classified or unclassified. Key requirements include avoiding inadvertent disclosure of sensitive information, protecting Controlled Unclassified Information (CUI), and implementing strict guidelines for handling critical information and indicators.

The document provides specific guidance on managing sensitive information, including restrictions on discussing shipyard-related work, protecting operational schedules, equipment capabilities, and facility details. Contractors must adhere to stringent countermeasures such as not posting shipyard information on public websites, using approved NSA crosscut shredders for sensitive documents, removing badges upon contract completion, and immediately reporting any unauthorized information disclosures. The form also covers portable electronic device policies, emphasizing the need to coordinate device usage with security personnel and determine approved and prohibited uses to prevent potential security violations.