N3904026Q3133 Attachment 1 OPSEC Plan_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that outlines security protocols and information protection standards for contractors and subcontractors performing work at the facility.

The document establishes that OPSEC is a process designed to protect sensitive information from unauthorized disclosure, whether classified or unclassified. An OPSEC plan must be signed by the Prime contractor and forwarded to the assigned contracting officer by encrypted email through the Department of Defense Safe (DoD SAFE) or U.S. Postal Service prior to contract award. The form indicates that an OPSEC Plan is NOT required for this specific contract, though requirements may be determined during installation work performance. All contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information during contract performance. Critical Information and Indicators (CII) that require protection include personally identifiable information (PII), naval operation schedules, ship repair schedules, drill schedules, equipment capabilities and vulnerabilities, identification of specific assets and facilities, and photographs or videos within shipyard work areas. Contractors must not post classified information or Controlled Unclassified Information (CUI) to corporate websites, social media, newsletters, or public platforms. Additional countermeasures include proper shredding of sensitive documents using NSA-approved methods, removal and return of all access badges upon contract completion, and immediate reporting of unauthorized disclosures or known compromises to the unit sponsor, prime contract officer, and Activity Security Manager.