N3904026Q3035 Attachment 4 - OPSEC Contract Requirements.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, dated November 3, 2008. The form outlines critical security protocols for contractors working with sensitive information, defining OPSEC as a process to protect critical and sensitive information from unauthorized disclosure. Key requirements include protecting Controlled Unclassified Information (CUI), avoiding inadvertent disclosure of sensitive data, and maintaining strict confidentiality of shipyard-related information.

The document includes a Portable Electronic Device (PED) Policy and a Critical Information and Indicators (CII) list, specifying prohibited actions such as posting shipyard-related information on social media, sharing sensitive operational details, or photographing restricted areas. Contractors must safeguard personally identifiable information, operational schedules, equipment capabilities, and infrastructure details. Violations can result in criminal prosecution and immediate reporting to security management. The specific OPSEC plan is marked as "NOT required" for this contract, with a signature date of 7/15/25.