N3904026Q3163 Attachment 1-Enclosure 2 PNSY OPSEC.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements enclosure that outlines security protocols and information protection standards for contractors working at the facility.

The document establishes that OPSEC is a process designed to protect sensitive information from unauthorized disclosure, whether classified or unclassified. An OPSEC Plan must be signed by the Prime Contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (DoD SAFE) or U.S. Postal Service prior to work commencement; however, the document indicates that an OPSEC Plan is NOT required for this particular contract. Contractors and subcontractors are responsible for preventing inadvertent disclosure of classified or unclassified Critical Information and Indicators (CII). Unauthorized disclosure may result in contract termination, criminal prosecution, and civil penalties. The document prohibits publicizing U.S. Government CII in corporate newsletters, trade magazines, displays, internet pages, public websites, personal email accounts, or social media platforms, with media requests directed to PNSY Security and Public Affairs Office.

The OPSEC Critical Information and Indicator List identifies specific threats including personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, identification of critical assets and infrastructure, and photographs or videos of shipyard work areas. Countermeasures include prohibiting posting of classified information or Controlled Unclassified Information (CUI) to company websites, shredding sensitive documents using approved NSA cross-cut shredders, removing badges upon departure, and immediately reporting any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and Activity Security Manager. Portable electronic devices are subject to shipyard guidance and require coordination with the sponsor prior to use.