Attachment 1 - N39040Q6134V600 2 PNSY OPSEC_Redacted.pdf

This document is the Operations Security (OPSEC) Contract Requirements form for Portsmouth Naval Shipyard, designed to be attached with solicitation and award documentation.

The document establishes OPSEC requirements for all contractors and subcontractors working on Portsmouth Naval Shipyard contracts. OPSEC is a process to protect sensitive information, defined as Critical Information and Indicators (CII), from unauthorized disclosure whether classified or unclassified. Contractors must avoid inadvertent disclosure of unclassified or classified information throughout contract performance. An OPSEC Plan may be required depending on the type of work, environment, and circumstances; the document indicates that for this particular contract, an OPSEC Plan is NOT required. The document identifies contractor responsibilities regarding protection of Controlled Unclassified Information (CUI) and U.S. Government CII, specifying that such information cannot be distributed to unauthorized third parties, published in corporate communications, or posted on social media. Unauthorized disclosure may result in contract termination, criminal prosecution, and civil penalties.

The document provides a detailed Critical Information and Indicator List (CILL) identifying categories of protected information including personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, asset identification, and photographs or videos from shipyard work areas. Corresponding countermeasures are specified, such as prohibiting posting of classified or CUI information on company websites, shredding sensitive documents using approved NSA crosscut shredders, removing badges upon contract completion, and immediately reporting any unauthorized disclosures or suspected compromises to the Activity Security Manager and Industrial Security Officer.