N3904026Q3068 OPSEC Encl 2- Attachment 1_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, outlining critical security protocols for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, covering both classified and unclassified critical information. Contractors are required to avoid inadvertent disclosure of sensitive information, with specific guidelines including restrictions on publicizing government Critical Unclassified Information (CUI) and strict handling of portable electronic devices.

The document details multiple security requirements, such as prohibiting distribution of sensitive information to unauthorized third parties, mandating immediate reporting of potential information compromises, and providing a comprehensive list of critical information indicators. Key restrictions include preventing publication of shipyard-related information on public websites, social media, or corporate newsletters, shredding sensitive documents using approved methods, and carefully managing access badges and electronic devices. Contractors must coordinate with their sponsor to determine approved device usage and are warned that failure to comply could result in criminal prosecution and civil penalties.