N3904026Q5451_ Attachment 2- OPSEC.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that outlines security protocols for contractors performing work at the facility.

The document specifies that OPSEC is a process designed to protect sensitive information from unauthorized disclosure, whether classified or unclassified. An OPSEC plan must be signed by the prime contractor and forwarded to the assigned contracting official via encrypted email or U.S. Postal Service. For this contract, the checkboxes indicate that an OPSEC Plan is NOT required. The document references DoDM 5205.02, OPSEC PM guidance dated November 3, 2008, and PTSMHINST policies as governing authorities, with an effective date of March 18, 2026.

Contractors and subcontractors are responsible for preventing inadvertent disclosure of classified or unclassified information throughout contract performance. Critical Information and Indicators (CII) that require protection include personally identifiable information, operational schedules, ship repair schedules, submarine docking schedules, equipment capabilities and vulnerabilities, specific asset and infrastructure identification, and photographs or videos from shipyard work areas. Contractors must not post sensitive information on corporate websites, newsletters, social media, or public websites. Specific countermeasures required include shredding sensitive documents using approved NSA crosscut shredders, removing and returning access badges upon contract completion, immediately reporting unauthorized disclosures to the unit sponsor and Activity Security Manager, and avoiding verbal discussion of shipyard-related work. The policy also restricts the use of portable electronic devices (PEDs) with recording capabilities in shipyard areas pending sponsor approval.