N3904026Q5200_ Attachment 2.pdf

This document is an Operations Security (OPSEC) Contract Requirements document issued by Portsmouth Naval Shipyard that establishes security protocols and guidelines for contractor personnel working on federal contracts at the facility.

The document defines OPSEC as a process to protect sensitive unclassified and classified information from unauthorized disclosure, with reference to DoD 5205.02, OPSEC PM, and related PTSMHINST regulations. A checked box indicates that an OPSEC Plan is NOT required for this contract, though contractors may be required to submit one depending on work type and circumstances. The document designates Wilhelm Jonath Christian as the OPSEC PM/DESIG REP with a signature date of 12/10/25. All contractors and subcontractors bear responsibility for preventing inadvertent disclosure of unclassified or classified information and must protect Controlled Unclassified Information (CUI) and Critical Information and Indicators (CII) appropriately. CII and sensitive information must never be published in corporate newsletters, trade magazines, websites, social media platforms, or personal email accounts. Disclosure violations may result in contract termination and criminal prosecution. The document includes a Portable Electronic Device (PED) Policy requiring coordination with sponsors regarding device capabilities and restrictions. A detailed Critical Information and Indicator List identifies prohibited disclosures including personally identifiable information, operation schedules, equipment vulnerabilities, facility identification, and photographs of shipyard work areas. Countermeasures specified include not posting classified or CUI information online, shredding sensitive documents using NSA-approved methods, removing identification badges upon departure, and immediately reporting any unauthorized disclosures or security compromises to the unit sponsor and Activity Security Manager.