N3904026Q5139 Attachment 4 OPSEC Enclosure 2.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements form, which establishes security protocols and information protection standards for contractors performing work at the facility.

The document outlines that OPSEC is a process to protect sensitive information from adversarial exploitation, with contractors required to submit an OPSEC Plan signed by the Prime Contractor prior to contract award. The form indicates that an OPSEC Plan is NOT required for this particular contract, though contractors must still comply with all security responsibilities. Contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information, with violations potentially resulting in contract termination and criminal prosecution. The document prohibits distribution of Portsmouth Naval Shipyard Critical Information and Indicators (CII) to unauthorized parties, including foreign entities, and restricts publication in corporate newsletters, trade magazines, social media, and personal email accounts.

Critical Information and Indicators include Personally Identifiable Information (PII), operation and repair schedules, equipment capabilities and vulnerabilities, facility and infrastructure identification, and photographs or videos within shipyard work areas. Countermeasures required include securing all sensitive information and CUI, shredding documents using approved NSA methods, removing and returning access badges upon contract completion, and immediately reporting unauthorized disclosures to the unit sponsor, prime contract officer, and the Activity Security Manager. The document also establishes controls for Portable Electronic Devices (PEDs) and Controlled Unclassified Information (CUI), requiring coordinator approval before use and restricting data transmission to approved Department of Defense systems.