OPSEC Guide.pdf

This document is an Operations Security (OPSEC) Guide for Defense Contractors developed by the Naval Undersea Warfare Center Division Keyport. It provides mandatory security requirements and guidance for government contractors, corporations, businesses, and independent contractors awarded government work by NUWCDIVKPT Keyport, Washington, and associated military facilities and installations.

The guide establishes three primary sections of OPSEC requirements applicable to contractor personnel based on the nature of their access and work. Section I addresses general contractor OPSEC requirements applicable to contractors requiring physical access to government facilities, personnel with access to government Critical Information (CI), and those handling government-supplied materials for production of sensitive unclassified or classified systems. These requirements prohibit introduction of personal electronic devices into government spaces, restrict discussion of government operations to protected communications only, prohibit posting of sensitive information to company websites or media, mandate concealment of government badges when off-station, and require destruction or return of all government information upon contract termination. For permanent onsite contractors, an OPSEC Point of Contact must be assigned, OPSEC awareness training must be provided within 30 days and annually thereafter, and a list of NUWCDIVKPT Command Critical Information must be maintained and marked as "FOR OFFICIAL USE ONLY" (FOUO). Section II specifies OPSEC training requirements for contractors requiring long-term facility access, with initial training within 30 days and annual refresher training required. Section III applies to contracts involving production of items with established OPSEC plans or those developing government Critical Information; in these cases, contractors must develop comprehensive OPSEC plans including internal employee training, with specific guidance provided in Data Item Descriptor D-MGMT-80934B and requiring NUWCDIVKPT Security Office approval before contract award. All OPSEC requirements are considered additional to National Industrial Security Program Manual (NISPOM) requirements, and compliance costs should be incorporated into proposal pricing.