N3904026Q3196 Attachment 1- OPSEC Encl 2_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements document for Portsmouth Naval Shipyard (PNSY) that must be attached with solicitation and award.

The document establishes OPSEC requirements to protect sensitive unclassified and classified information from exploitation by adversaries, specifically Critical Information and Indicators (CII). An OPSEC plan is not required for this contract as of the signature date of July 31, 2026. All contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information throughout the contract period. The document prohibits publication of U.S. Government CII in corporate newsletters, trade magazines, displays, websites, or social media platforms, and restricts personal email transmission and social media posting. Contractors must protect all CII appropriately and immediately report any unauthorized disclosures or suspected compromises to the Activity Security Manager and Industrial Security Officer.

The document identifies specific categories of critical information requiring protection, including personally identifiable information (PII), verbal discussion restrictions regarding PNSY work, operation and repair schedules, equipment capabilities and vulnerabilities, identification of specific assets and critical infrastructure, and photographs or videos taken in shipyard work areas including drydocks and restricted access areas. Required countermeasures include not posting classified or controlled unclassified information to company media, shredding sensitive documents using an approved NSA crosscut shredder, removing identification badges upon departure, and immediately reporting any unauthorized disclosures or compromises to the unit sponsor and prime contract officer.