N3904026Q3149 Attachment 3 PNSY OPSEC Requirements_Redacted.pdf

This document is Operations Security (OPSEC) Contract Requirements guidance issued by Portsmouth Naval Shipyard applicable to federal contracts.

The document establishes mandatory OPSEC protections for contractors and subcontractors to prevent inadvertent disclosure of classified or unclassified sensitive information during contract performance. An OPSEC plan must be signed by the Prime contractor and forwarded to the assigned contracting official by encrypted email through the Department of Defense Safe (DoD SAFE) or U.S. Postal Service prior to work commencement, though the document indicates that for this specific contract, an OPSEC Plan is NOT required. Contractors and all personnel are responsible for protecting Critical Information and Indicators (CII), which include personally identifiable information, operation schedules, equipment capabilities and vulnerabilities, facility and infrastructure details, and shipyard photographs or videos. Prohibited activities include publishing U.S. Government CII on corporate websites, newsletters, or social media platforms; posting on personal email accounts or social media; and discussing Portsmouth Naval Shipyard-related work verbally. Contractors must immediately report any unauthorized disclosures or suspected compromises to their unit sponsor, prime contract officer, and the Activity Security Manager. Additional requirements address Portable Electronic Devices (PEDs) requiring coordination with sponsors for approval before use, and Controlled Unclassified Information (CUI) handling procedures. Violations may result in individual removal from the contract, contract termination, criminal prosecution, and civil penalties.