N3904025Q4305_ Attachment 4 OPSEC.pdf

This document is an Operations Security (OPSEC) requirements document for the Portsmouth Naval Shipyard that outlines security protocols for contractors handling sensitive information. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries and details the requirements for contractors' OPSEC plans.

The document includes specific guidelines for protecting Critical Information and Indicators (CII), including restrictions on sharing information through social media, personal email accounts, or corporate communications. It contains a detailed Portable Electronic Device (PED) policy covering devices like laptops, phones, and digital cameras. Key sensitive information that must be protected includes personally identifiable information (PII), operation schedules, ship repair schedules, equipment capabilities, and facility information. Contractors must report any unauthorized disclosures immediately, protect CUI (Controlled Unclassified Information), and properly dispose of sensitive information using NSA-approved shredders. The document specifies that OPSEC Plan is NOT required for this particular contract, as indicated by the checkbox marked with an expiration date of 12/13/24.