N3904027Q3147 Attachment 6 PNSY OPSEC_Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that establishes security protocols and information protection standards for contractors working at the facility.

The document outlines OPSEC as a process designed to protect sensitive information from adversarial exploitation, including unclassified data classified as Critical Information and Indicators (CII). An OPSEC Plan must be signed by the prime contractor and forwarded to the assigned contracting official via encrypted email or U.S. Postal Service through the DoD Safe Secure Access File Exchange (SAFE). The form indicates that an OPSEC Plan is NOT required for this particular contract, though consideration may be given based on work type, environment, and circumstances. The document was signed by NEEDHAM ALLEN (KNIGHT III) on 5/4/26.

Contractors and subcontractors bear responsibility for preventing inadvertent disclosure of unclassified or classified information throughout contract performance. Key prohibitions include: publishing U.S. Government CII in corporate newsletters, trade magazines, websites, or social media; transmitting sensitive information through personal email accounts or social media platforms; photographing shipyard work areas, drydocks, submarines, restricted areas, and controlled access areas; and publicly discussing operation schedules, repair schedules, and equipment capabilities. The document specifies that Portable Electronic Devices (PEDs) are controlled and their use requires sponsor coordination and security approval. All unauthorized disclosures of CII or Controlled Unclassified Information (CUI) must be immediately reported to the Activity Security Manager and Industrial Security Officer. Failure to comply may result in contract termination, criminal prosecution, and civil penalties.