N3904026Q3159 Attachment 1-OPSEC Encl 2_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements guidance that outlines security protocols and information protection responsibilities for contractors working on federal contracts at the facility.

The document establishes that OPSEC is a process designed to protect sensitive information from exploitation by adversaries, with particular focus on Critical Information and Indicators (CII). An OPSEC plan is required to record, identify, and monitor contractor OPSEC activities during contract performance; however, the specific document indicates that an OPSEC plan is NOT required for this particular contract work. The contractor's primary responsibility is to avoid inadvertent disclosure of unclassified or classified information throughout the contract period. The document specifies that contractors must not distribute U.S. Government CII to unauthorized third parties, including foreign governments or companies under Foreign Ownership, Control or Influence (FOCI), and must protect all CII appropriately based on the nature of the information.

The document identifies specific categories of critical information and indicators that require protection, including personally identifiable information (PII), operational schedules, ship repair schedules, equipment capabilities and vulnerabilities, facility and infrastructure identification, and photographs or videos taken within shipyard work areas. Contractors are explicitly prohibited from posting shipyard-related information on public social media websites or corporate publications, and must shred sensitive documents using approved NSA crosscut shredders. All personnel must remove issued badges upon leaving the shipyard and report any unauthorized disclosures or compromises of critical information immediately to the unit sponsor, prime contract officer, and the Activity Security Manager. The document references DoD 5205.02, OPSEC PM standards, and PTSMHINST policies as regulatory authorities.