N3904026Q5077 Attachment 2 OPSEC_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form detailing security protocols for contractors. The document specifies that an OPSEC plan is NOT required for this contract, and outlines contractors' responsibilities for protecting Critical Information (CI) and sensitive information. Key security requirements include prohibiting disclosure of U.S. Government CI in corporate newsletters, trade magazines, public websites, and social media platforms, with all media requests directed to PNSY Security and Public Affairs Office.

The document provides extensive guidance on handling Portable Electronic Devices (PEDs) and Critical Information and Indicators (CII), listing specific examples of sensitive information that must be protected, such as personally identifiable information, operation schedules, equipment capabilities, and infrastructure details. Contractors are mandated to implement strict countermeasures including not posting classified information online, shredding sensitive documents, removing issued badges upon contract completion, and immediately reporting any unauthorized disclosures or compromises of critical information to the unit sponsor and Activity Security Manager.