N3904026Q5536 Attachment 3 - OPSEC.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements attachment that outlines security protocols and information protection standards for contractors.

The document establishes that OPSEC is a process designed to protect sensitive and unclassified information from adversarial exploitation. An OPSEC Plan is required to record, identify, and monitor contractor OPSEC activities during contract performance, though the document indicates that an OPSEC Plan is NOT required for this specific contract as of the date 05/05/2026. Contractors and subcontractors bear responsibility for avoiding inadvertent disclosure of classified or unclassified information throughout contract performance. Critical Information and Indicators (CII) that require protection include personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, facility and infrastructure identification, and photographs or videos taken within shipyard work areas. Contractors must not publicize government CII through corporate newsletters, social media, or public websites, and all transmissions must utilize approved secure channels. The document specifies that unauthorized disclosure of CII may result in contract termination and criminal prosecution. Additionally, the PNSY Portable Electronic Device (PED) Policy restricts contractor use of portable electronic devices such as smartphones, laptops, cameras, and recording devices within shipyard facilities, with specific guidance to be coordinated through the contract sponsor and security personnel.