N39040Q6036V238 Attachment 3_Enclosure 2 PNSY OPSEC Contract Requirements_6036V2401.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements guidance that must be attached with solicitation and award documentation.

The document establishes OPSEC obligations for all contractors and subcontractors performing work at Portsmouth Naval Shipyard. An OPSEC Plan is required to record, identify, and monitor contractor OPSEC activities and must be signed by the Prime contractor and forwarded to the contracting officer by encrypted email or USPS prior to work commencement. The checklist indicates that an OPSEC Plan is NOT required for this specific contract, with an effective date of 3/11/26. Contractors are responsible for protecting sensitive information, including Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI), from inadvertent disclosure whether classified or unclassified. PNSY CII will not be distributed to unauthorized third parties, foreign governments, or companies under Foreign Ownership, Control, or Influence (FOCI). Unauthorized disclosure may result in contract termination, removal of personnel, and criminal prosecution.

The document specifies prohibited and required activities regarding information protection. Critical Information examples include personally identifiable information, operation schedules, equipment capabilities, asset identification, and photographs within shipyard work areas. Countermeasures require contractors to avoid posting classified or CUI information on company websites or social media, shred sensitive documents using NSA-approved methods, remove and return access badges upon contract completion, and immediately report any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and Activity Security Manager.