N3904026Q3087 Attachment 2- OPSEC_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, detailing critical information protection guidelines for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, focusing on safeguarding Critical Information and Indicators (CII) that need protection from unauthorized disclosure, whether classified or unclassified.

The form outlines specific contractor responsibilities, including avoiding inadvertent disclosure of sensitive information, protecting all Controlled Unclassified Information (CUI), and implementing strict security measures. Key requirements include: not publicizing government CII in corporate newsletters or public websites, restricting discussions about shipyard-related work, protecting information about operational schedules, equipment capabilities, and facility infrastructure, and immediately reporting any unauthorized information disclosures. The document also includes a Portable Electronic Device (PED) Policy that controls the use of electronic devices like mobile phones, laptops, and wearable technology, emphasizing the need to coordinate device usage with the sponsor and determine authorized and prohibited uses to prevent security violations.