N3904026C3035 Attachment 4 - OPSEC Contract Requirements.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, dated 7/15/25, providing guidelines for contractors regarding the protection of sensitive information. The document defines OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, whether classified or unclassified, and outlines specific responsibilities for contractors.

Key requirements include avoiding inadvertent disclosure of sensitive information, protecting Controlled Unclassified Information (CUI), and adhering to strict guidelines for handling portable electronic devices. Critical information indicators that must be protected include personally identifiable information, operation schedules, equipment capabilities, facility details, and photographs/images from restricted areas. Contractors must implement countermeasures such as not posting sensitive information on public websites, using approved NSA crosscut shredders for sensitive documents, removing issued badges upon contract completion, and immediately reporting any unauthorized information disclosures.