Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements

This document is a federal contract requirements sheet for Operations Security (OPSEC) compliance at Portsmouth Naval Shipyard. OPSEC is a process designed to protect sensitive information, including Critical Information and Indicators (CII), from exploitation by adversaries. The document establishes that an OPSEC Plan must be signed by the Prime Contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (DoD SAFE) file exchange or U.S. Postal Service. However, the document indicates via checkbox that an OPSEC Plan is NOT required for this particular contract, though contractors are responsible for avoiding inadvertent disclosure of unclassified or classified information throughout contract performance.

The document outlines contractor responsibilities and prohibited activities regarding the protection of Controlled Unclassified Information (CUI) and Personally Identifiable Information (PII). Contractors must not post classified information or CUI on company websites, newsletters, social media, or trade publications. Critical Information examples include operation schedules, ship repair schedules, equipment capabilities, asset identification, facility vulnerabilities, and photographs taken within shipyard work areas. Countermeasures required include shredding sensitive documents using NSA-approved equipment, removing identification badges upon departure, securing and returning access credentials, maintaining restrictions on verbal discussions regarding shipyard work, and reporting any unauthorized disclosure or suspected compromises immediately to the unit sponsor, prime contract officer, and Activity Security Manager.