N3904026Q3153 Attachment 1- OPSEC Encl 2_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that establishes security protocols and information protection standards for contractors performing work at the shipyard.

The document requires contractors and subcontractors to protect sensitive U.S. Government Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI) from unauthorized disclosure throughout the contract period. An OPSEC Plan may be required depending on the type of work, environment, and circumstances; in this instance, the form indicates that an OPSEC Plan is NOT required. Contractors are prohibited from disclosing classified or unclassified sensitive information through corporate communications, social media, personal email accounts, or public websites. Critical Information and Indicators include personally identifiable information (PII), operation schedules, ship repair and docking schedules, equipment capabilities and vulnerabilities, identification of specific assets and critical infrastructure, and photographs or videos taken within shipyard work areas. Contractors must remove and return all access badges, passes, and keys upon contract completion. The document specifies that Portable Electronic Devices (PEDs) used at the shipyard are subject to security controls and require coordination with the sponsor regarding approved usage. Contractors must immediately report any unauthorized disclosures or suspected compromises of critical information to the unit sponsor, prime contract officer, and the Activity Security Manager. Violations may result in contract termination, removal from federal contract work, and criminal prosecution with civil penalties.