N3904026Q3184 Attachment 1- Enclosure 2 OPSEC.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements specification that must be attached with solicitation and award.

The document establishes OPSEC requirements for contractors working at Portsmouth Naval Shipyard to protect sensitive information from unauthorized disclosure. An OPSEC plan is NOT required for this contract, though contractors must comply with basic OPSEC contract requirements. All contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information during contract performance. Contractors may be exposed to U.S. Government Critical Information and Indicators (CII), which must be protected from unauthorized third parties, including foreign-owned companies. U.S. Government CII cannot be publicized in corporate newsletters, trade magazines, displays, internet pages, public websites, or social media platforms; transmission to personal email accounts and posting on social media is prohibited. Unauthorized disclosure of CII may result in contract termination, criminal prosecution, and civil penalties.

The document details specific OPSEC protections including restrictions on Personally Identifiable Information (PII), verbal discussion of shipyard work, operation schedules, equipment capabilities, facility identification, and photography within shipyard work areas. Controlled Unclassified Information (CUI) must be shredded using approved NSA crosscut shredders and never discarded in trash. Portable electronic devices (PEDs) require approval and coordination with sponsors before use. Contractors must immediately report any unauthorized disclosure or suspected compromise of critical information to the unit sponsor, prime contract officer, and the Activity Security Manager. All identification badges must be removed when leaving the shipyard and returned upon contract completion.