N39040Q5333V266 Attachment 6_Enclosure 2 PNSY OPSEC Contract Requirements 25.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements attachment outlining mandatory security protocols for contractors and subcontractors working on federal contracts at the facility.

The document establishes OPSEC as a process to protect sensitive information, classified and unclassified, from unauthorized disclosure and exploitation. Contractors are required to submit an OPSEC Plan signed by the Prime Contractor and forwarded to the contracting officer via encrypted email through the Department of Defense Safe (DoD SAFE) at https://safe.apps.mil or U.S. Postal Service. The OPSEC Plan requirement is marked as "NOT required" in the checked box dated 12/12/25, though the document notes that plan requirements may vary based on work type, environment, and circumstances. Contractors are responsible for protecting Controlled Unclassified Information (CUI) and Critical Information and Indicators (CII), which include personally identifiable information, operational schedules, equipment capabilities, facility and system identification, and photographs or videos within shipyard work areas.

Key contractor responsibilities include preventing inadvertent disclosure of classified or unclassified information, restricting verbal discussion of PNSY work, protecting portable electronic devices (PEDs), and immediately reporting any unauthorized disclosure or suspected compromises to the Activity Security Manager and Industrial Security Officer. Contractors must not publish sensitive information in corporate newsletters, social media, or public websites, and must use NSA-approved shredders for document disposal. Additional countermeasures require removal of issued badges upon contract completion, prohibition on duplicating or loaning access badges, and immediate reporting of lost or stolen identification badges.