N3904026Q5139 Attachment 4 OPSEC Enclosure 2.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements guidance, which serves as an enclosure to be attached with solicitations and awards.

The document establishes OPSEC requirements for all contractors and subcontractors performing work at Portsmouth Naval Shipyard. An OPSEC plan is required to record, identify, and monitor contractor OPSEC activities; however, this particular document indicates that an OPSEC plan is NOT required for the associated contract, though one may be determined later depending on the installation work conducted. The document references applicable regulations including DoDM 5205.02, OPSEC PM guidance, and PTSMHINST policies. All contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information, and must protect Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI) throughout contract performance.

The document provides detailed guidance on CII examples including personally identifiable information, operation schedules, equipment capabilities, facility identification, and shipyard photographs. Countermeasures are specified, including prohibitions against posting classified information or CUI to company websites, social media, or public venues; requirements to shred sensitive documents using approved NSA crosscut shredders; mandatory removal of identification badges upon departure; and immediate reporting of any unauthorized disclosures to the unit sponsor, prime contract officer, and Activity Security Manager. Unauthorized disclosure may result in contract termination, criminal prosecution, and civil penalties.