N3904026Q5642 Attachment 2 OPSEC_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements notice issued by the Department of Defense.

The document establishes OPSEC requirements and procedures for contractors working at Portsmouth Naval Shipyard. OPSEC is a process designed to protect sensitive information from exploitation by adversaries, with sensitive information defined as Critical Information and Indicators (CII). An OPSEC plan is required to identify and monitor the contractor's OPSEC activities during contract performance, and the plan must be recorded, reviewed, and forwarded to the assigned contracting official via encrypted email through the Department of Defense SAFE (Secure Access File Exchange) or United States Postal Service. The OPSEC plan requirement determination depends on the type of work, environment, and circumstances, with specific guidance provided by the contracting officer. The document is signed with an effective date of 6/25/26 and indicates that OPSEC Plan is NOT required for this particular contract. Contractors bear responsibility for protecting CII or sensitive information identified by the Command and higher headquarters, and contractor personnel may be exposed to, use, or produce U.S. Government CII and observable indicators. The document also includes a Portable Electronic Device (PED) Policy section restricting personal electronic devices on Naval Shipyard premises and provides examples of critical information and countermeasures, including restrictions on personally identifiable information, operational schedules, equipment capabilities, asset identification, photographs, and verbal discussions related to shipyard work.