N3904026Q2982 Attachment 1- OPSEC Encl 2_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, outlining critical information protection guidelines for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, with specific requirements for contractors regarding the handling of Controlled Unclassified Information (CUI) and Critical Information and Indicators (CII).

Key requirements include avoiding inadvertent disclosure of sensitive information, protecting all Critical Information (CI) from unauthorized third parties, and following strict guidelines for managing portable electronic devices. Contractors must not publicize government CII in corporate newsletters, websites, or social media, and must immediately report any unauthorized disclosures. The document provides a detailed list of sensitive information types to protect, such as personally identifiable information, operation schedules, equipment capabilities, and infrastructure details, along with corresponding countermeasures like shredding sensitive documents, removing issued badges upon contract completion, and reporting potential security compromises.