Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements

This document is an Operations Security (OPSEC) Contract Requirements guidance document issued by Portsmouth Naval Shipyard for contractors performing work at the facility. OPSEC is a process designed to protect sensitive unclassified and classified information, including Critical Information and Indicators (CII), from unauthorized disclosure or exploitation by adversaries. The document establishes that an OPSEC plan must be signed by the prime contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (DoD SAFE) system or U.S. Postal Service. However, the document indicates that an OPSEC plan is NOT required for this particular contract, though consideration may be given based on the type of work, environment, and circumstances involved.

The document outlines critical contractor responsibilities to prevent inadvertent disclosure of unclassified or classified information, including restrictions on publishing government information in corporate newsletters, trade magazines, social media, or personal email accounts. Contractors must protect Controlled Unclassified Information (CUI) and avoid unauthorized disclosure to foreign entities or companies under Foreign Ownership, Control or Influence (FOCI). Examples of critical information requiring protection include personally identifiable information, operational schedules, ship repair schedules, equipment capabilities and vulnerabilities, facility and asset identification, and photographs within shipyard work areas. Countermeasures specified include prohibitions against posting shipyard information on social media, proper document shredding using NSA-approved equipment, removal of badges upon departure, and immediate reporting of any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and the Activity Security Manager.