N39040Q5325E029 Attachment 5 Enclosure 2 PNSY OPSEC Contract Requirements.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements specification that must be attached to solicitations and contract awards.

The document defines OPSEC as a process to protect sensitive information, classified or unclassified, from unauthorized disclosure. It establishes that contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information during contract performance. An OPSEC Plan is required to record, identify, and monitor the contractor's OPSEC activities during performance. The OPSEC Plan, if required, must be signed by the prime contractor and forwarded to the assigned contracting officer via encrypted email through the Department of Defense Secure Access File Exchange (SAFE) at https://safe.apps.mil or United States Postal Service before availability start date. The determination of whether an OPSEC Plan is required depends on the type of work being performed, the environment, and contract performance circumstances. In this particular contract requirement, OPSEC Plan is marked as NOT required as of the February 27, 2020 signature date by OPSEC PM/DESIG REP Chasse Lyndo. The contractor must protect Critical Information and Indicators (CII) and U.S. Government CII appropriately, prevent publication in corporate newsletters, trade magazines, displays, websites, social media, and personal email accounts, and direct all media requests to PNSY Security and Public Affairs Office. Unauthorized disclosure of CII, whether willful or through negligence, may result in removal of assigned personnel, contract termination, and criminal prosecution.