N3904026Q5703 Attachment 2 PNS Operations Security Contract Requirements 26-149-Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that establishes security protocols for contractors working on federal contracts at the shipyard.

The document defines OPSEC as a process to protect sensitive information from unauthorized disclosure, with particular focus on Critical Information and Indicators (CII). An OPSEC Plan is required to record, identify, and monitor contractor security activities during contract performance. The form indicates that an OPSEC Plan is NOT required for this particular contract, signed by NEEDHAM ALLEN on 7/14/26. The contractor is responsible for protecting U.S. Government Classified Information (CII) and Controlled Unclassified Information (CUI) throughout the contract period, ensuring no disclosure to unauthorized third parties, including foreign entities. Information cannot be publicized in corporate newsletters, trade magazines, internet pages, social media, or personal email accounts; all media requests must be directed to PNSY Security and Public Affairs Office.

The document provides specific examples of Critical Information and Indicators that contractors must protect, including personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, facility identification, and photographs or videos from shipyard work areas. Contractors must implement countermeasures such as not posting classified or CUI information online, shredding sensitive documents using NSA-approved methods, removing badges upon departure, and immediately reporting any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and Activity Security Manager. Violations may result in contract termination and criminal prosecution.