N3904026Q3195 Attachment 1- OPSEC Encl 2_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements specification for Portsmouth Naval Shipyard. The document outlines OPSEC policies and procedures that contractors must follow to protect sensitive information from unauthorized disclosure during contract performance. The reference standards include DoDM 5205.02, OPSEC PM guidance dated 3 November 2008, and PTSMHINST directives. An OPSEC Plan is not required for this contract as indicated by the checkmarked box, though the document notes that requirements may vary based on work type and environment.

The document establishes contractor responsibilities to prevent inadvertent disclosure of classified or unclassified information, including Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI). Key restrictions include prohibitions on publishing government CII in corporate communications, social media, or personal email accounts, and requirements to protect information such as personally identifiable information, operation schedules, equipment capabilities, facility details, and photographs taken within shipyard work areas. Contractors must implement countermeasures including secure document destruction using NSA-approved shredders, badge management upon contract completion, and immediate reporting of unauthorized disclosures to the Activity Security Manager and Industrial Security Officer. Portable electronic devices require coordination with sponsors before use, and violations may result in contract termination and criminal prosecution.