N3904026Q3179 Attachment 1- OPSEC.pdf

This document is an Operations Security (OPSEC) Contract Requirements attachment for Portsmouth Naval Shipyard that must be included with solicitation and award documentation.

The document establishes OPSEC requirements to protect sensitive government information from unauthorized disclosure. OPSEC is defined as a process protecting Critical Information and Indicators (CII)—sensitive unclassified and classified data requiring safeguarding. An OPSEC Plan is required to record, identify, and monitor contractor OPSEC activities during contract performance and must be signed by the Prime contractor and forwarded to the contracting official via encrypted email through the Defense Secure Access File Exchange (SAFE) or U.S. Postal Service. The specific requirement for an OPSEC Plan is determined based on work type, environment, and performance circumstances; this particular contract has an OPSEC Plan marked as NOT required. Contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information and protecting Controlled Unclassified Information (CUI) from unauthorized third parties, including foreign entities under Foreign Ownership, Control, or Influence (FOCI).

The document details critical information threats and countermeasures specific to Portsmouth Naval Shipyard operations. Contractors must restrict disclosure of Personally Identifiable Information (PII), operation and repair schedules, equipment capabilities and vulnerabilities, asset and infrastructure identification, and photographs within shipyard work areas. Countermeasures include prohibiting posting of classified or CUI information on company websites, social media, or public platforms; using NSA-approved shredders for sensitive documents; removing and returning all access badges upon contract completion; and immediately reporting any unauthorized disclosures or compromises to the unit sponsor, prime contract officer, and Activity Security Manager. Violations may result in contract termination, criminal prosecution, and civil penalties.