N3904026Q3099 Attachment 4 Enclosure 2 OPSEC.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements enclosure that outlines security protocols and information protection procedures for contractors working at the facility.

The document establishes that OPSEC is a process designed to protect sensitive and classified information from unauthorized disclosure. All contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information during contract performance. An OPSEC plan is required in some cases and must be signed by the Prime contractor and forwarded to the assigned contracting official via encrypted email through the DoD Safe Access File Exchange (SAFE) or U.S. Postal Service. The document indicates that an OPSEC plan is NOT required for this particular contract. Contractors must protect Critical Information and Indicators (CII), which include personally identifiable information, operational schedules, equipment capabilities, facility identification, and shipyard-related photographs or videos. The document prohibits posting sensitive government information on corporate websites, social media, or public newsletters. Contractors must immediately report any unauthorized disclosure or suspected compromises of critical information to the Activity Security Manager and Industrial Security Officer. The Portsmouth Naval Shipyard Portable Electronic Device (PED) Policy restricts the use of transportable electronic devices and requires coordination with sponsors before use. Employees must remove issued badges upon departure and return all access materials. Criminal prosecution and civil and criminal penalties may result from disclosure or compromise of classified information.