N3904026Q6176V222 Attachment 3_2 PNSY OPSEC Contract Requirements1_Redacted.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements form that must be attached with solicitations and awards.

The document establishes OPSEC protocols to protect sensitive information from unauthorized disclosure during contract performance. OPSEC is defined as a process to safeguard Critical Information and Indicators (CII) from exploitation by adversaries, covering both classified and unclassified sensitive data. Contractors and subcontractors are responsible for preventing inadvertent disclosure of such information. An OPSEC Plan may be required depending on the type of work, environment, and circumstances, with submission requirements determined by the installation conducting the work. The document indicates that an OPSEC Plan is not required for this particular contract (as marked in the checkbox).

The form details specific contractor responsibilities and prohibited actions regarding information protection. Contractors must protect CII and Controlled Unclassified Information (CUI) and prevent distribution to unauthorized third parties, including foreign entities under foreign ownership, control, or influence. Critical examples of protected information include personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, facility and asset identification, and photographs of shipyard areas. Prohibited activities include publicizing government CII in corporate communications, social media, or personal email accounts; posting shipyard-related information on public websites; and failure to report unauthorized disclosures. The document specifies that violations may result in contract removal, termination, and criminal penalties. Requirements also address portable electronic devices (PEDs) used at the facility and mandate immediate reporting of any suspected compromises or unauthorized access attempts to the unit sponsor and Activity Security Manager.