Attachment 1: OPSEC PNSY

Portsmouth Naval Shipyard
Operations Security (OPSEC) Contract Requirements
Refer to OPSEC Plan for Contractors (separate attachment).

Attach with Solicitation and Award
Reference
DoDM 5205.02, OSPSEC PM, 3 November 2008; PTSMHINST 5510.27A, OPSEC Policy; PTSMHINST 5500.6 PED Policy What is OPSEC?
OPSEC is a process used to protect sensitive information from exploitation by an adversary. Sensitive information, which is also referred to as Critical Information and Indicators(CII), is defined as information that needs to be protected from unauthorized disclosure whether classified or unclassified. What is an OPSEC Plan?
An OPSEC plan is used to record, identify and monitor the OPSEC activities during the performance of
the contract. After award but prior to availability start date, this OPSEC Plan must be signed by the Prime contractor and forwarded to the assigned contracting official by encrypted email, through the approved Department of Defense Safe(DoD) Secure Access File Exchange (SAFE) at https://safe.apps.mil, or by United States Postal Service. Consideration shall be given depending on the type of work being performed, the environment, and circumstances in which contract performance will occur. In some cases, an OPSEC Plan will be required. In other cases, the contractors may only simply be required to receive this basic OPSEC contract requirements form.

OPSEC PM or DESIG REP:

Signature

Date

Responsibility of the Contractor
It is the responsibility of all contractors and subcontractors to avoid inadvertent disclosure of unclassified or classified information during the period of this contract.
OPSEC compromise is the disclosure of CII or sensitive information, which has been identified by the Command and and any higher headquarters to adequately protect its personnel and equipment. During the period of this contract, contractor personnel may be exposed to, use, or produce, U.S. Government CII and observable indicators which may lead to disclosure of CII. PNSY CII will not be distributed to unauthorized third parties, including foreign government or companies under Foreign Ownership, Control or Influence (FOCI). The contractor shall protect all CII in a manner appropriate to the nature of the information. U.S. Government CII shall not be publicized in corporate wide newsletters, trade magazines, displays, internet page or public websites. All transmission to personal email accounts (AOL, Yahoo, Gmail, Hotmail, Comcast, etc.,) and posting