N3904026Q3090 Attachment 2- Enclosure 2 PNSY OPSEC.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements notice that must be attached with solicitation and award documentation.

The document establishes OPSEC requirements for all contractors and subcontractors working at Portsmouth Naval Shipyard to protect sensitive information from unauthorized disclosure. An OPSEC plan is required to record, identify, and monitor contractor OPSEC activities during contract performance. The document indicates that an OPSEC plan is NOT required for this particular contract, though the requirement determination is referenced in a separate OPSEC Plan for Contractors attachment. All contractors are responsible for avoiding inadvertent disclosure of unclassified or classified information, including Critical Information and Indicators (CII), which must be protected whether classified or unclassified. CII compromise includes disclosure of CII or sensitive information identified by command leadership. U.S. Government CII cannot be publicized in corporate newsletters, trade magazines, displays, websites, or social media, and transmission to personal email accounts or social media posting is prohibited. Unauthorized disclosure may result in contract termination, criminal prosecution, and civil penalties.

The document details specific CII examples requiring protection, including personally identifiable information, operation schedules, equipment capabilities, facility identification, and photographs or videos of shipyard work areas. Countermeasures include prohibiting posting of classified information or CUI to company websites or media, proper shredding of sensitive documents using NSA-approved equipment, restricting shipyard information from social media, removing and returning access badges upon contract completion, and immediately reporting any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and Activity Security Manager.