N3904025Q3054 Attachment - 1 OPSEC Enclosure 2_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form addressing critical information protection and security protocols for contractors. The document outlines OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, requiring contractors to avoid inadvertent information compromise during the contract period. Key requirements include protecting Controlled Unclassified Information (CUI), restricting discussions about shipyard-related work, and implementing specific security measures such as not posting sensitive information on public websites, shredding documents with approved NSA cross-cut shredders, and immediately reporting any unauthorized information disclosures.

The second page details a Portable Electronic Device (PED) Policy, defining these devices as easily transportable electronics capable of recording, copying, storing, and transmitting data. The policy provides a comprehensive list of critical information and indicators (CII) that must be protected, including personally identifiable information, operation schedules, equipment capabilities, and infrastructure details. Contractors are instructed to coordinate with their sponsors to determine device usage, obtain necessary approvals, and adhere to strict security guidelines. Countermeasures include not posting classified information, shredding sensitive documents, removing issued badges upon contract completion, and reporting any potential security compromises to the appropriate authorities.