N3904026Q5540 Attachment 3 - OPSEC_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements form for Portsmouth Naval Shipyard that must be attached with solicitation and award documentation.

The OPSEC plan requirement is NOT required for this contract (effective 4/21/26), though contractors may be required to complete one depending on work type, environment, and circumstances. OPSEC is a process to protect sensitive information from exploitation by adversaries, including Critical Information and Indicators (CII) that require protection whether classified or unclassified. All contractors and subcontractors are responsible for avoiding inadvertent disclosure of classified or unclassified information throughout contract performance. Contractors must protect Controlled Unclassified Information (CUI) and ensure CII is not distributed to unauthorized third parties, foreign governments, or entities under Foreign Ownership, Control or Influence (FOCI). U.S. Government CII cannot be publicized in corporate newsletters, trade magazines, internet pages, public websites, or posted on social media platforms. Disclosure or compromise of CII to unauthorized persons may result in contract termination and potential criminal prosecution.

The document identifies specific threat/risk examples requiring protection including Personally Identifiable Information (PII), verbal discussions about shipyard work, operation and repair schedules, equipment capabilities and vulnerabilities, identification of critical assets and infrastructure, and photographs or videos taken within shipyard work areas including drydocks and restricted areas. Required countermeasures include prohibiting posting of classified information or CUI on company media, shredding sensitive documents using approved NSA crosscut shredders, removing and returning all access badges upon contract completion, and immediately reporting unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and Activity Security Manager.