N3904026Q3073 PNSY OPSEC Enclosure 2.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that details critical information protection guidelines for contractors. The document outlines OPSEC as a process to protect sensitive and critical information from unauthorized disclosure, requiring contractors to safeguard Controlled Unclassified Information (CUI) and prevent compromise of sensitive data. Key contractor responsibilities include avoiding inadvertent disclosure of classified or unclassified information, protecting all critical information appropriately, and understanding that unauthorized disclosure could result in criminal prosecution.

The document also includes a Portable Electronic Device (PED) Policy section, which provides guidelines for electronic devices like mobile phones, laptops, and personal digital assistants. It lists examples of Critical Information and Indicators (CII) that must be protected, such as personally identifiable information, operation schedules, equipment capabilities, and facility infrastructure details. Contractors are mandated to coordinate device usage with their sponsor, obtain security and IT approval, and adhere to strict countermeasures like not posting shipyard-related information on public websites, shredding sensitive documents, and reporting any unauthorized information disclosures immediately.