N3904026Q5450_ Attachment 2- OPSEC.pdf

This document is the Operations Security (OPSEC) Contract Requirements document for Portsmouth Naval Shipyard, establishing mandatory security protocols that must be attached to all solicitations and awards.

The document defines OPSEC as a process to protect sensitive information from exploitation, including Critical Information and Indicators (CII) that require protection whether classified or unclassified. An OPSEC Plan is required to record, identify, and monitor contractor OPSEC activities during contract performance, to be signed by the Prime contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (DoD SAFE) or United States Postal Service. The document indicates that an OPSEC Plan is NOT required for this particular contract, though determination may occur during installation work. The OPSEC PM or DESIG REP is Wilhelm Jonath (digitally signed by An Christian), dated 3/11/26.

Contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information throughout contract performance. The document prohibits posting CII to corporate newsletters, trade magazines, internet pages, public websites, personal email accounts, or social media platforms. CII must be protected appropriately, and unauthorized disclosure may result in contract termination and criminal prosecution. The document identifies specific threat/risk areas including Personally Identifiable Information (PII), operation schedules, equipment capabilities, asset identification, and photographs within shipyard areas. Countermeasures include preventing posting of classified or CUI information on company media, shredding sensitive documents using approved methods, removing identification badges upon departure, and reporting unauthorized disclosures immediately to unit sponsors and Activity Security Managers. The Portable Electronic Device (PED) Policy governs use of devices capable of recording, copying, storing, or transmitting data.