Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements

This document is an OPSEC Contract Requirements form for Portsmouth Naval Shipyard that establishes security protocols and contractor obligations for protecting sensitive information during contract performance. The document references the OPSEC Plan for Contractors as a separate attachment and is to be included with solicitations and awards. The form is dated April 20, 2020, and was signed by NEEDHAM ALLEN, the OPSEC PM or DESIG REP, with a notation that an OPSEC Plan is NOT required for this particular contract.

Contractors and subcontractors are responsible for preventing inadvertent disclosure of unclassified or classified information and must protect Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI) from unauthorized third parties, including foreign entities and companies with Foreign Ownership, Control or Influence (FOCI). The document specifies that CII includes personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, facility identification, and photographs within shipyard work areas. Contractors must implement countermeasures including prohibiting posting of classified information or CUI to company media channels, using NSA-approved shredders for sensitive documents, removing identification badges upon departure, and immediately reporting any unauthorized disclosures to the unit sponsor, prime contract officer, and the Activity Security Manager. Portable electronic devices are subject to shipyard guidance and require sponsor coordination for security approval and use restrictions.