Attachment 1 - Enclosure 2 PNSY OPSEC.pdf

This document is an Operations Security (OPSEC) Contract Requirements guidance issued by Portsmouth Naval Shipyard, effective through February 10, 2026.

The document establishes mandatory security protocols for contractor personnel working at Portsmouth Naval Shipyard. An OPSEC plan is not required for this contract; however, all contractors and subcontractors must comply with information protection responsibilities to prevent inadvertent disclosure of classified or unclassified sensitive information. Contractors are prohibited from sharing Critical Information and Indicators (CII), Controlled Unclassified Information (CUI), and Personally Identifiable Information (PII) through corporate communications channels, social media, personal email accounts, trade publications, or public websites. The document identifies specific threat categories including operation schedules, equipment capabilities, facility vulnerabilities, asset identification, and photographs of restricted shipyard areas. Contractors must use NSA-approved methods for destroying sensitive documents, immediately report suspected compromises or unauthorized disclosures to the Activity Security Manager and unit sponsor, remove and return all access badges upon contract completion, and refrain from verbal discussion of shipyard-related work. The guidance also addresses Portable Electronic Devices (PEDs), requiring coordination with the sponsor regarding device approval and security restrictions prior to use in shipyard environments. Non-compliance with OPSEC requirements may result in contract removal, termination, and criminal prosecution with civil and criminal penalties.