N3904027Q5885 Attachment 2 - OPSEC Encl 2_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements attachment for Portsmouth Naval Shipyard that must be included with solicitation and award documents.

The document establishes OPSEC requirements to protect sensitive and classified information from adversarial exploitation during contract performance. An OPSEC plan is required to record, identify, and monitor contractor OPSEC activities; however, the specific OPSEC PM or DESIG REP has determined that an OPSEC plan is NOT required for this contract as of September 26, 2026. Contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information and protecting Controlled Unclassified Information (CUI). U.S. Government CUI cannot be distributed to unauthorized third parties, posted on public websites or social media, or transmitted via personal email accounts. Disclosure or compromise of CUI may result in criminal prosecution and civil penalties.

The document provides guidance on Portable Electronic Devices (PEDs) and identifies Critical Information and Indicators (CII) that require protection. Examples of CII include personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, asset and facility identification, and photographs within shipyard work areas. Countermeasures include prohibiting posting of classified or CUI information on company websites, shredding sensitive documents using approved NSA crosscut shredders, removing badges upon contract completion, and immediately reporting unauthorized disclosures to the unit sponsor, prime contract officer, and Activity Security Manager.