N3904026Q3180- Attachment 1-OPSEC Encl 2_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements notice that establishes security protocols and information protection standards for contractors and subcontractors.

The document outlines that OPSEC is a process designed to protect sensitive information from unauthorized disclosure, whether classified or unclassified. An OPSEC plan must be signed by the Prime contractor and forwarded to the contracting officer via encrypted email through the Department of Defense Safe (DoD SAFE) or U.S. Postal Service. For this contract, the OPSEC plan is marked as NOT required. The document emphasizes that all contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information during contract performance. Contractors must protect Controlled Unclassified Information (CUI), with specific restrictions on distribution to unauthorized parties, foreign entities, or companies with Foreign Ownership, Control or Influence (FOCI). Government CII cannot be published in newsletters, trade magazines, or posted on social media or personal email accounts. Violations may result in contract termination and criminal prosecution.

The document provides detailed guidance on Portable Electronic Devices (PEDs), which must be coordinated with sponsors before use at the shipyard. The Controlled Information and Indicator List identifies specific threat areas including personally identifiable information (PII), operational schedules, equipment capabilities, vulnerabilities, asset identification, facility details, and photographs of shipyard work areas. Countermeasures require contractors to avoid posting classified or CUI information online, shred sensitive documents using approved NSA crosscut shredders, remove and return access badges upon completion, and immediately report any unauthorized disclosure or suspected compromise to the unit sponsor, prime contractor officer, and the Activity Security Manager.