N3904026Q3185 Attachment 2 Enclosure 2 PNSY OPSEC Contract Requirements 26-135_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that outlines security protocols and information protection standards for contractors performing work at the facility.

The document establishes that OPSEC is a process designed to protect sensitive and critical information from unauthorized disclosure, whether classified or unclassified. An OPSEC plan must be signed by the prime contractor and forwarded to the assigned contracting officer via encrypted email through the Department of Defense Safe Secure Access File Exchange (SAFE) or U.S. Postal Service. The form indicates that for this particular contract, an OPSEC plan is not required. Contractors and subcontractors bear full responsibility for preventing inadvertent disclosure of classified or unclassified information and protecting all Critical Information and Indicators (CII). Specific prohibitions include publishing government CII in corporate newsletters, trade magazines, displays, websites, or social media; transmitting CII through personal email accounts; and posting on social media platforms. Contractors must also comply with Portable Electronic Device (PED) policies and coordinate with their sponsor regarding device usage and security violations.

The document details critical information categories requiring protection, including personally identifiable information (PII), operational schedules, equipment capabilities and vulnerabilities, asset and facility identification, and photographs or videos from shipyard work areas. Countermeasures require contractors to restrict posting of sensitive information to company media, shred all unneeded sensitive documents using approved NSA crosscut shredders, remove and return all identification badges upon contract completion, and immediately report any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and the Activity Security Manager.