Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements

This document is an OPSEC requirements attachment for federal contracts at Portsmouth Naval Shipyard. OPSEC is a process designed to protect sensitive information, including Critical Information and Indicators (CII), from unauthorized disclosure whether classified or unclassified. The document establishes that an OPSEC plan is not required for this particular contract, as indicated by the signed certification dated February 4, 2026, by OPSEC PM/DESIG REP Needham Allen. The contract references DoD 5205.02, OPSEC PM guidance from November 3, 2008, and PTSMHINST 5510.27A and 5500.6 PED Policy as regulatory authorities.

Contractors are responsible for protecting all Critical Information, Controlled Unclassified Information (CUI), and Personally Identifiable Information (PII) during contract performance. Prohibited activities include publishing government CII in corporate communications, posting on social media, transmitting via personal email accounts, and discussing shipyard operations or equipment capabilities. Critical information requiring protection includes operation schedules, ship repair schedules, equipment vulnerabilities, facility infrastructure, and photographs taken within shipyard work areas. Contractors must immediately report any unauthorized disclosure or compromise to the unit sponsor, prime contract officer, and Activity Security Manager. Portable electronic devices (PEDs) used on the shipyard are controlled and subject to shipyard guidance and sponsor approval. Failure to comply with OPSEC requirements may result in removal from assignment, contract termination, criminal prosecution, and civil penalties.