OPSEC_Guide.pdf

This document is an Operations Security (OPSEC) Guide for Defense Contractors developed by Naval Undersea Warfare Center Division Keyport (NUWCDIVKPT). The guide provides mandatory security requirements and procedures that government contractors must follow when performing work for NUWCDIVKPT and other Navy facilities, vessels, and aircraft. The guidance applies to corporations, businesses, and independent contractors awarded government contracts and ensures compliance with and protection of Nation Security Information.

OPSEC is defined as an analytical process to identify Critical Information (CI), assess threats to that information, identify vulnerabilities and risks, and implement countermeasures to protect CI. The guide establishes three levels of OPSEC requirements depending on contract scope: Section I applies to contractors with intermittent or short-term physical access to facilities; Section II applies to contractors requiring continuous access or embedded personnel; and Section III applies to contracts involving production of items with established OPSEC plans or Government Critical Information. Key contractor obligations include strict control of electronic devices on government premises; prohibition of discussing government operations over unprotected communications; restrictions on posting sensitive information to websites or media; mandatory marking and protection of government information; destruction or return of government materials at contract termination; annual OPSEC training within 30 days of assignment; assignment of an OPSEC Point of Contact for permanent onsite contractors; and adherence to NUWCDIVKPT-provided Critical Information Lists. All costs associated with OPSEC compliance must be included in contract proposals. The document was developed by the Security Office (Code 105) at NUWCDIVKPT in Keyport, Washington, and is approved for public release with unlimited distribution.