N3904025Q3025 Attachment 2 - OPSEC Contract Requirements.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, outlining critical information protection guidelines for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, covering both classified and unclassified critical and sensitive information. Contractors are required to avoid inadvertent disclosure of sensitive information during the contract period, with specific restrictions on sharing Controlled Unclassified Information (CUI), including personally identifiable information, shipyard-related work schedules, equipment capabilities, and infrastructure details.

The document includes a Portable Electronic Device (PED) Policy that controls the use of electronic devices like mobile phones, laptops, digital cameras, and wearable technology. Contractors must coordinate with their sponsor to determine approved device usage and are subject to security violations for non-compliance. The document provides a detailed list of critical information indicators and corresponding countermeasures, such as prohibiting posting of sensitive information on social media, properly destroying sensitive documents, removing badges upon contract completion, and immediately reporting any unauthorized information disclosures to the unit sponsor and security manager.