N3904027Q1010 Attachment 2 -OPSEC Contract Requirements.pdf

This document is an Operations Security (OPSEC) Contract Requirements document issued by Portsmouth Naval Shipyard that establishes security protocols and safeguarding measures for contractors performing work at the facility.

The document specifies that an OPSEC Plan is NOT required for this particular contract, though contractors must still comply with all OPSEC responsibilities outlined. All contractors and subcontractors are responsible for protecting sensitive information, including both classified and unclassified Critical Information and Indicators (CII), from unauthorized disclosure. Critical Information includes Personally Identifiable Information (PII), operation schedules, ship repair schedules, drill schedules, equipment capabilities and vulnerabilities, facility and asset identification, and photographs or videos taken within shipyard work areas. Contractors are prohibited from publishing government CII in corporate newsletters, trade magazines, internet pages, social media platforms, or personal email accounts. Portable Electronic Devices (PEDs) such as cameras, smartphones, and recording devices require approval through the sponsor before use. All contractors must immediately report any suspected unauthorized disclosure or compromise of sensitive information to the Activity Security Manager and Industrial Security Officer. Violations may result in contract termination, removal of personnel, and criminal prosecution. The document also requires removal of badges upon contract completion and use of NSA-approved shredders for disposing of shipyard-related documents.