N39040Q53448288_Attachment 2_PNSY OPSEC Contract Requirements_Redacted.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements attachment, effective January 14, 2026.

OPSEC is a process designed to protect sensitive information and Critical Information and Indicators (CII) from unauthorized disclosure, whether classified or unclassified. An OPSEC Plan is required to document, identify, and monitor contractor OPSEC activities during contract performance. The plan must be signed by the Prime Contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (DoD SAFE) or U.S. Postal Service. The document indicates that an OPSEC Plan is NOT required for this particular contract, though consideration may be given based on work type, environment, and circumstances. Contractors may be required only to receive the basic OPSEC contract requirements form.

All contractors and subcontractors are responsible for preventing inadvertent disclosure of classified or unclassified information. Contractor personnel may be exposed to U.S. Government CII that must be protected from unauthorized third parties, including foreign entities and companies under Foreign Ownership, Control, or Influence (FOCI). Critical information requiring protection includes personally identifiable information (PII), verbal discussions regarding PNSY work, operation and repair schedules, equipment capabilities and vulnerabilities, facility and asset identification, and photographs or videos of shipyard work areas. Contractors must not publicize sensitive information through newsletters, social media, or public websites. Violations may result in contract termination, criminal prosecution, and civil penalties. All unauthorized disclosures or compromises must be immediately reported to the Activity Security Manager Code 1120 and the Industrial Security Officer.