Operations Security Contract Requirements.pdf

This is an Operations Security (OPSEC) requirements document from Portsmouth Naval Shipyard that outlines security protocols for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, including both classified and unclassified Critical Information and Indicators (CII).

The document specifies that contractors must submit an OPSEC plan prior to work start date, which must be approved and transmitted via encrypted DoD SAFE or postal service. Key requirements include: protecting CII from unauthorized disclosure, prohibiting distribution to foreign entities under FOCI, restricting social media posting of shipyard information, proper handling of Controlled Unclassified Information (CUI), and proper use of portable electronic devices (PEDs). The document includes specific countermeasures like shredding sensitive documents, removing badges when leaving the shipyard, and immediately reporting unauthorized disclosures. Critical information to be protected includes personally identifiable information, ship repair schedules, equipment capabilities, and photographs/videos of restricted areas. Per the signed form dated 1/13/25, an OPSEC plan is not required for this particular contract.