N3904026Q6176V222 Attachment 4_2 PNSY OPSEC Contract Requirements1_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements template that outlines security protocols and information protection standards for contractors.

The document establishes OPSEC as a protective process designed to safeguard sensitive and classified information from unauthorized disclosure. Contractors and subcontractors are required to develop and submit an OPSEC Plan, which must be approved by the Prime Contractor and forwarded to the contracting officer through encrypted email or U.S. Postal Service. However, the specific instance checked indicates that an OPSEC Plan is NOT required for this contract. Contractors bear full responsibility for protecting unclassified and classified information during contract performance and must ensure that Controlled Unclassified Information (CUI) and Personally Identifiable Information (PII) are not disclosed through personal email accounts, corporate newsletters, social media, or public websites. Unauthorized disclosure may result in contract termination and criminal prosecution.

The document identifies critical information requiring protection, including personally identifiable information, operation schedules, equipment capabilities, facility infrastructure details, and photographs or videos taken in shipyard work areas. Specific countermeasures mandated include prohibiting posts of sensitive information on company or public websites, shredding all sensitive documents using NSA-approved methods, removing identification badges upon departure, and immediately reporting any unauthorized disclosures or suspected compromises to the unit sponsor and Activity Security Manager. Portable electronic devices (PEDs) such as smartphones, laptops, and cameras are subject to shipyard guidance and require sponsor approval before use.