N3904027Q5873 Attachment 2 Enclosure 2 PNSY OPSEC.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements form that establishes security protocols and information protection standards for contractors and subcontractors performing work at the facility.

The document specifies that an OPSEC plan is NOT required for this contract, though contractors must still comply with all stated security responsibilities. Key requirements include protecting Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI) from unauthorized disclosure, whether classified or unclassified. Contractors and all personnel are prohibited from disclosing sensitive information through corporate communications, social media, personal email accounts, or public websites. Specific threat areas identified include personally identifiable information (PII), operation schedules, equipment capabilities and vulnerabilities, facility and infrastructure details, and photographs or videos taken within shipyard work areas. Portable electronic devices (PEDs) such as smartphones, laptops, USB devices, and cameras are controlled and require coordination with the sponsor for approval before use. Contractors must report any unauthorized disclosures or suspected compromises of critical information immediately to the unit sponsor and Activity Security Manager. Upon contract completion, all access badges, passes, and keys must be returned. Violations may result in contract termination and criminal prosecution with civil and criminal penalties imposed. The form was signed by NEEDHAM ALLEN, OPSEC PM or DESIG REP, on 9/1/26.