ML022000475

Emergency Plan Implementing Procedure EIP-ZZ-SK001, Revision 000, Response to Security Events.

ML022000475
Person / Time
Site:	Callaway
Issue date:	07/12/2002
From:	Graessle L AmerenUE
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
EIP-ZZ-SK001, Rev 000
Download: ML022000475 (32)

Text

DATE: 07/12/02 AMEREN/UE PAGE: 48 TIME: 08:56:05 DOCUMENT CONTROL SYSTEM ARDC8801 DOCUMENT TRANSMITTAL TRANSMITTAL NUMBER: 489502 RETURN ACKNOWLEDGED TRANSMITTAL AND TO CONTROL NUMBER: 338U SUPERSEDED DOCUMENTS (IF APPLICABLE) TO:

TITLE: OTHER ADMINISTRATION RECORDS DEPT: NUCLEAR REGULATORY COMM. AMEREN/UE LOCATION: USNRC - WASH DC CALLAWAY PLANT TRANSMITTAL DATE: 20020712 P.O. BOX 620 FULTON, MO 65251 TRAN DOC RET ALT ALT CODE TYPE DOCUMENT NUMBER REV REV MED COPY MED COPY AFFECTED DOCUMENT A PROC EIP-ZZ-SK001 000 C 1 ACKNOWLEDGED BY: DATE:

AW-51

EIP-ZZ-SK001 Revision 000 June 27, 2002 CALLAWAY PLANT EMERGENCY IMPLEMENTING PROCEDURES EIP-ZZ-SK001 RESPONSE TO SECURITY EVENTS RESPONSIBLE DEPARTMENT Security PROCEDURE OWNER L. H. Graessle WRITTEN BY L. H. Graessle PREPARED BY L. H. Graessle APPROVED BY 6L/kAv ,"

ACCOUNTABLE DATE ISSUED ___________

This procedure contains the following:

Pages 1 through I A-tY v .- b-O Attachments 1 through 14 Tables through Figures through Appendices through Checkoff Lists through This procedure has checkoff list(s) maintained in the mainframe computer.

Conversion of commitments to TRS reference/hidden text completed by Revision Number:

Non-T/S Commitments

EIP-ZZ-SK001 Rev. 000 TABLE OF CONTENTS Section Page Number 1 PURPOSE AND SCOPE 1 2 INITIATING CONDITIONS 1 3 DEFINITIONS 2 4 GENERAL CONSIDERATIONS DURING SECURITY EVENTS 3 5 RECEIPT OF A SECURITY THREAT 3 6 RECEIPT OF A CREDIBLE THREAT 5 7 CREDIBLE INSIDER THREAT (ULNRC 4621) 5 8 CREDIBLE IMMINENT AIRCRAFT THREAT 5 9 ARMED ATTACK ON CALLAWAY PLANT 5 10 DISCOVERY OF A SUSPICIOUS PACKAGE, LETTER OR MAIL (CARS 200106120) 6 11 DISCOVERY OF A BOMB OR INCENDIARY DEVICE 7 12 HOSTAGE/DURESS SITUATIONS (ULNRC-04621) 7 13 INDICATIONS OF POSSIBLE ACTS OF SABOTAGE, VANDALISM, MALICIOUS MISCHIEF, OR EQUIPMENT TAMPERING 8 14 BOMB OR EXTORTION THREAT 9 15 REPORTABILITY 9 16 RESTORATION 10 17 REFERENCES 11 18 RECORDS 11

-i-

EIP-ZZ-SKOO1 Rev. 000 TABLE OF CONTENTS Section Pa ge Number Attachment 1 Checklist for Receipt of a Credible Threat 1 page Checklist for Receipt of a Credible Insider Threat Attachment 2 2 pages Attachment 3 Security Briefing for Credible Insider Threat 1 page Attachment 4 Checklist for Receipt of a Credible Imminent Aircraft Threat 2 pages Attachment 5 Checklist for Armed Attack on Callaway Plant 1 page Determination of the Suspicious Nature of Package, Letter or Mail 1 page Checklist for Discovery of a Suspicious Package, Letter or Mail 1 page Checklist for Discovery of a Bomb or Incendiary Device 1 page Checklist for Hostage/Duress Situations 1 page 0 Checklist for Indications of Possible Acts of Sabotage, Vandalism, Malicious Mischief, or Equipment Tampering 1 page 1 Bomb or Extortion Threat Credibility Guidance 1 page 2 Checklist for Bomb or Extortion Threat 2 pages 3 Threat Report Form 1 page 4 Considerations During a Security Threat 1 page

- ii -

EIP-ZZ-SKOO1 Rev. 000 RESPONSE TO SECURITY EVENTS 1 PURPOSE AND SCOPE 1.1 To provide guidance to plant personnel upon initiation of a condition that may initiate a Security Emergency Action Level.

(COMN 2666) 2 INITIATING CONDITIONS 2.1 Receipt of a Security Threat.

2.2 Armed attack on Callaway Plant.

2.3 Discovery of a suspicious package, letter or mail.

2.4 Discovery of a bomb or incendiary device.

2.5 Hostage/duress situation.

2.6 Indications of possible acts of sabotage, vandalism, malicious mischief or equipment tampering.

EIP-ZZ-SKOO 1 Rev. 000 3 DEFINITIONS 3.1 Security Threat A Security Threat is any event in which there is a reason to believe that a person or persons have threatened to commit or cause, or attempted to commit or cause any of the following actions at the Callaway Plant.

a. A theft or unlawful diversion of nuclear fuel or spent nuclear fuel from the plant site.

b. Significant physical damage to the plant, its equipment, nuclear fuel, spent nuclear fuel or carrier equipment transporting nuclear fuel or spent nuclear fuel.

c. Interruption of the plant's normal operations through the unauthorized use of, or tampering with, the plant's equipment, machinery, components, controls or security system.

d. Any armed attack of the plant's Protected Area.

e. Credible bomb or extortion threat.

f. Confirmed Hostage or Duress situation at the Callaway Plant.

3.2 Credible Threat A threat is considered credible if notification of the threat has come from the NRC, FBI, or Local Law Enforcement and they consider the threat to be credible; or if the threat is deemed credible by the SS/EDO, and the threat is specifically directed at the Callaway Plant. Refer to Attachment 11 for credibility guidance.

3.3 Imminent Aircraft Threat Imminent Aircraft threats are received from the NRC via the Emergency Notification System (RED phone).

3.4 Essential Personnel For the purposes of this procedure, essential personnel are defined as those personnel who do not leave the Protected Area for accountability or evacuation.

EIP-ZZ-SKOO 1 Rev. 000 4 GENERAL CONSIDERATIONS DURING SECURITY EVENTS 4.1 Each security event will be unique and will require independent thinking and judgment based on the nuances of what is occurring.

This procedure provides basic requirements to ensure emergency response is implemented in a manner that has a high probability of protecting the health and safety of plant personnel and the public.

Attachment 14, Considerations During a Security Event provides additional items to consider and is intended to provide suggestions to consider when a security event occurs. Attachment 14 may be utilized in any security event.

4.2 Many of the events described in this procedure constitute situations where crimes will have occurred. As such, the locations where these events occur may be crime scenes. In order to protect the crime scene, consideration should be taken to limit the number of people in the area during and after the event and ensure that materials and equipment that may be present is not disturbed until responding law enforcement has released the area(s) back to the plant.

5 RECEIPT OF A SECURITY THREAT 5.1 When a security threat is received, the Shift Supervisor and the Security Shift Supervisor MUST be made aware and a determination MUST be made to ascertain whether the threat is credible. If it is determined that the threat is credible, section 6.0, "Receipt Of A Credible Threat" MUST be implemented. If the threat is determined to be credible and involves an insider component, section 7.0, "Receipt of a Credible Insider Threat" MUST be implemented.

EIP-ZZ-SKOO 1 Rev. 000 5.2 RECEIPT OF A THREAT BY TELEPHONE 5.2.1 The individual receiving the telephone threat MUST:

5.2.1.1 Obtain as much information as possible concerning the type or nature of the threat, such as:

NOTE: Attempt to ask questions from the Threat Report Form, CA-# 103, (Attachment 13) or the Bomb/Threat Checklist located in the Ameren Telephone Directory.

a. Type of threat (bomb, vandalism, extortion, attack, etc.)

b. Location of the threat (i.e., where the bomb is located, what equipment will be tampered with, etc.)

c. Time the threat will be implemented.

d. Caller's name and address.

e. Telephone background noise.

5.2.1.2 If the phone is equipped with "Call Trace", record the conversation by pressing the call trace button.

5.2.1.3 Complete the Threat Report Form, CA-# 103, (Attachment 13).

5.2.1.4 Notify the Security Shift Supervisor or the Shift Supervisor immediately by calling telephone number 9911.

5.3 RECEIPT OF A THREAT BY MAIL 5.3.1 The individual receiving the threat MUST:

5.3.1.1 Place the threat correspondence, including the envelope, in a folder or between two sheets of paper to minimize handling.

5.3.1.2 Notify the Security Shift Supervisor or the Shift Supervisor immediately by calling telephone number 9911.

EIP-ZZ-SKOO 1 Rev. 000 5.4 RECEIPT OF A THREAT BY ANY OTHER MEANS 5.4.1 Obtain as much information as possible concerning the threat, identity of the person or group making the threat, and any other details concerning the threat.

5.4.2 Notify the Security Shift Supervisor or the Shift Supervisor immediately by calling telephone number 9911.

6 RECEIPT OF A CREDIBLE THREAT 6.1 Implement Checklist for Receipt of a Credible Threat, Attachment 1.

7 CREDIBLE INSIDER THREAT (ULNRC 4621) 7.1 Implement Checklist for Receipt of a Credible Insider Threat, Attachment 2.

8 CREDIBLE IMMINENT AIRCRAFT THREAT 8.1 Implement Checklist for Receipt of a Credible Imminent Aircraft Threat, Attachment 4.

9 ARMED ATTACK ON CALLAWAY PLANT 9.1 Implement Checklist for Armed Attack on Callaway Plant, Attachment 5.

EIP-ZZ-SK001 Rev. 000 10 DISCOVERY OF A SUSPICIOUS PACKAGE, LETTER OR MAIL (CARS 200106120) 10.1 Instructions for plant personnel:

10.1.1 Do not touch or move the suspicious package, letter or mail.

10.1.2 Contact Security at 68774 and advise of the location of the package.

CAUTION: Do not touch or otherwise disturb a suspected explosive or incendiary device.

[ CA UTION: Do not use cell phones or radios within 100 feet of a suspected explosive or incendiary device.

Turn all radios OFF.

10.1.3 Move away from the device. Make use of available cover such as substantial walls and buildings.

10.1.4 Alert other personnel in the immediate area to leave the area or take cover.

10.1.5 To reduce the potential for possible contamination of critical areas, off-site mail or packages MUST NOT be opened in the Plant Control Room, the Main Access Facility, the Central Alarm Station, or the Secondary Alarm Station.

10.2 Instructions for Shift Supervisor:

10.2.1 Implement Checklist for Discovery of a Suspicious Package, Letter, or Mail, Attachment 7.

EIP-ZZ-SK001 Rev. 000 11 DISCOVERY OF A BOMB OR INCENDIARY DEVICE 11.1 Instructions for plant personnel:

CA UTION: Do not touch or otherwise disturb a suspected explosive or incendiary device.

CA UTION:- Do not use cell phones or radios within 100 feet of a suspected explosive or incendiary device.

Turn all radios OFF.

11.1.1 Move away from the device. Make use of available cover such as substantial walls and buildings.

11.1.2 Alert other personnel in the immediate area to leave the area or take cover.

11.1.3 Notify the Security Shift Supervisor or the Shift Supervisor immediately by calling telephone number 9911 or contact the Security Shift Supervisor or Shift Supervisor via gaitronics.

11.2 Instructions for the Shift Supervisor:

11.2.1 Implement Checklist for Discovery of a Bomb or Incendiary Device, Attachment 8.

12 HOSTAGE/DURESS SITUATIONS (ULNRC-04621) 12.1 Instructions for plant personnel:

12.1.1 Do not attempt to resolve the situation by yourself.

12.1.2 Withdraw to a position of safety.

EIP-ZZ-SKOO1 Rev. 000 12.1.3 Immediately report the following information to Security at extension 68774:

"* Your name, badge number, and present location.

"* Exact nature of and exact location of the situation.

"* Description of the hostage taker(s).

"* Description of the hostage(s).

"* Stand-by at current location until contacted by Security.

12.2 Instruction for hostage(s):

"* Comply with hostage takers demands unless those demands could result in the injury of plant personnel or release of radiological materials.

"* Avoid aggressive speech and actions.

"* Do not threaten the self-image of the hostage taker.

"* Move and speak slowly while keeping hands in plain view.

Avoid direct, sustained eye contact.

"* If possible dialogue with the hostage taker. Increase your value as a person in the eyes of the hostage taker.

"* Remember that the passage of time improves your safety and the potential for safe release.

12.3 Instructions for the Shift Supervisor:

12.3.1 Implement Checklist for Hostage/Duress Situations, Attachment 9.

13 INDICATIONS OF POSSIBLE ACTS OF SABOTAGE, VANDALISM, MALICIOUS MISCHIEF, OR EQUIPMENT TAMPERING 13.1 Instructions for plant personnel:

13.1.1 Contact the Shift Supervisor and report that a possible act of sabotage, vandalism, malicious mischief, or equipment tampering has occurred. The Shift Supervisor will contact the Shift Security Supervisor.

13.2 Instructions for the Shift Supervisor:

13.2.1 Implement Checklist for Indications of Possible Acts of Sabotage, Vandalism, Malicious Mischief, or Equipment Tampering, Attachment 10.

EIP-ZZ-SK001 Rev. 000 14 BOMB OR EXTORTION THREAT 14.1 Actions for plant personnel:

14.1.1 Fill out the Threat Report Form CA-# 103, Attachment 3 or the Bomb/Threat Checklist located in the Ameren Telephone Directory. (CARS 200106120) 14.1.2 If received by telephone, do not hang up the phone.

14.1.3 If the phone is equipped with "Call Trace," record the conversation by pressing the call trace button.

14.1.4 Contact the Shift Supervisor and report the threat.

14.2 Action for the Shift Supervisor:

14.2.1 In conjunction with the Security Shift Supervisor and the EDO, utilize Attachment 11, Bomb or Extortion Threat Credibility Evidence, to determine if the threat is credible.

14.2.2 If the threat is determined to be credible, implement Checklist for Bomb or Extortion Threat, Attachment 12.

15 REPORTABILITY 15.1 Notify the NRC, as required, in accordance with Procedure SDP SF-00022, Reporting of Safeguards Events.

15.1.1 Reporting times for threat related events is 1-hour for a credible threat.

15.1.2 Threats which are determined to not be credible MUST be logged in accordance with Procedure SDP-SF-00022, Reporting of Safeguards Events.

NOTE: Incidents of equipment misalignment or damage in which the cause is unknown should be considered as possible acts of sabotage, vandalism, malicious mischief, or tampering until such time that it can be determined that not malicious intent was involved.

EIP-ZZ-SK001 Rev. 000 15.2 Reporting times for an act of vandalism of vital equipment or a confirmed tampering of safety or security equipment that is of suspicious origin is 1-hour.

16 RESTORATION NOTE: Although access to plant areas may be restored, to the maximum extent possible, personnel should avoid areas where security events have occurred or where possible intruders may have passed through until a thorough search can be performed. The possibility can exist for the placement of undetonated explosive devices.

Additionally, the areas may be crime scenes and as such, the preservation of evidence MUST be maintained.

16.1 When Security provides notification that the security event has been terminated or upon verification that the security threat no longer exists, make the following plant announcement:

(CARS 200106158)

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. The Security Event has been terminated. General access has been restored.

Follow the direction of security personnel to avoid any secured areas."

(Repeat the announcement.)

16.2 If a security event was declared in accordance with EIP-ZZ-00 101, Classification of Emergencies, make a follow-up notification to off-site authorities per EIP-ZZ-00201, Notifications. The change in security event status needs to be communicated to the off-site personnel even though the emergency may not have been terminated.

EIP-ZZ-SKOO1 Rev. 000 17 REFERENCES 17.1 OTO-SK-00001, Plant Security Event 17.2 EIP-ZZ-00 101, Classification of Emergencies 17.3 EIP-ZZ-00201, Notifications 17.4 SDP-SF-00022, Reporting of Safeguards Events 18 RECORDS 18.1 Commercial Records Checklists initiated as a result of this procedure should be sent to Commercial File S 170.0070.

18.2 QA Records None EIP-ZZ-SKOO1 Rev. 000 CHECKLIST FOR RECEIPT OF A CREDIBLE THREAT I Li Determine if the threat involves an insider component. If it does, go to the Checklist for "Receipt of a Credible Insider Threat", Attachment 2.

2. Li Advise the Shift Security Supervisor of the threat and the need to report the threat to Local Law Enforcement Agencies and take necessary action in accordance with the Callaway Plant Security Plan and implementing procedures.

3. Li Implement EAL Group 3(A), Confirmed Security Event which indicates a

potential degradation in the level of safety at the plant in accordance with EIP-ZZ 00101, Classification of Emergencies.

4. [] Evaluate the nature of the threat and make a determination if there is a potential threat to the health and safety of any plant personnel.

4.1. Li If the nature of the threat is immediate and time for evacuation of personnel does not exist, the following plant announcement should be made:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. An Immediate Security Threat has been received. Place your work in a safe condition and take cover.

Wait for additional announcements."

(Repeat the announcement.)

4.2. Li If the nature of the threat is such that it does not involve an immediate or short term danger to the general plant population, and the threat does not contain an insider component, the following plant announcement should be made:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A credible security threat towards Callaway Plant has been received. The nature of this threat is such that general plant personnel are not deemed to be at immediate risk.

All plant personnel should heighten their awareness and stand-by for additional announcements."

(Repeat the announcement.)

5. Ll The Shift Supervisor (SS) MUST contact the Emergency Duty Officer (EDO).

The SS and EDO MUST review the considerations in Attachment 14, Considerations During a Security Event. The decision to implement any of the actions listed may be made based on the nature of the threat.

Page I of I ATTACHMENT 1

EIP-ZZ-SK00 1 Rev. 000 CHECKLIST FOR RECEIPT OF A CREDIBLE INSIDER THREAT

1. L Advise the Shift Security Supervisor of the threat and the need to report the threat to Local Law Enforcement Agencies and take necessary action in accordance with the Callaway Plant Security Plan and implementing procedures.

2. Li Implement EAL Group 3(A), Confirmed Security Event which indicates a potential degradation in the level of safety at the plant in accordance with EIP-ZZ 00101, Classification of Emergencies.

3. Li Evaluate the nature of the threat and make a determination if there is a potential threat to the health and safety of any plant personnel.

4. Li If the nature of the threat is immediate and time for evacuation of personnel does not exist, the following plant announcement should be made:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A credible security threat towards the Callaway Plant has been received. All on-shift watchstanders report to the Field Office and stand-by for a briefing. All non-essential personnel report to your pre-designated Assembly Areas in the Callaway Multipurpose Building or the Training Center and stand-by for a briefing.

Take all personal belongings such as coats, car keys and purses. Follow the instructions of your Supervisor and Security Officers.

(Repeat the announcement.)

5. Li Once personnel are in their accountability locations, ensure Attachment 3, Security Briefing for Credible Insider Threat, is read to all personnel.

6. Li Personnel in assembly locations outside of the Protected Area have been advised by the Security Briefing for Credible Insider Threat to stay in their assembly areas until further direction is received from Plant Management.

NOTE: The requirement for the Line of Site Two-Person Rule must be implemented as soon as practicable. It is recognized that additional personnel may need to be called in to implement this activity. Routine essential duties such as Equipment Operator rounds and Security Patrols may continue until personnel are available on-site to implement the Line of Site Two-Person Rule.

7. Li Any exceptions to the Line of Site Two-Person Rule MUST be approved by the Shift Supervisor and those exceptions MUST only be made to allow for essential plant duties in the interim period until necessary personnel have arrived on site to support the Two Person Rule.

Page I of 2 ATTACHMENT 2

EIP-ZZ-SK001 Rev. 000

8. [L The Shift Supervisor (SS) MUST contact the Emergency Duty Officer (EDO).

The SS and EDO MUST review the considerations in Attachment 14, Considerations During a Security Event. The decision to implement any of the actions listed may be made based on the nature of the threat.

Page 2 of 2 ATTACHMENT 2

EIP-ZZ-SKOO1 Rev. 000 SECURITY BRIEFING FOR CREDIBLE INSIDER THREAT Instructions for person giving briefing:

1. Provide only factual information.

2. If non-essential personnel wish to leave the Callaway Plant Site, advise them that this is being evaluated and if necessary, additional instructions will be given regarding non essential personnel leaving the Callaway Plant Site.

3. Read the following instructions to all personnel.

4. Advise non-essential personnel to stay in their assembly area until they are given further instructions.

Instructions for Line of Site Two-Person Rule The Callaway Plant has received a Credible Security Threat. Included in this threat is information indicating that someone at the plant may be involved in an effort to cause damage to the plant. All personnel who have a work-related need to enter a card reader area inside the Protected Area, must be accompanied by another person. This does not include the MAF card reader to get into the Protected Area. The two persons do not need to have the same skills but must have access to the same areas. The purpose is to ensure observation of all personnel in these areas. If you observe any suspicious behavior, please contact Security immediately.

Personnel assembled outside of the protected area should remain in their assembly location until given further instructions by a member of plant management.

It is recognized in some cases additional personnel may need to be called in to ensure essential work such as Equipment Operator Rounds and Security Patrols can be performed. Any short term exceptions to the Line of Site Two-Person Rule MUST be approved by the Shift Supervisor.

Page I of I ATTACHMENT 3

EIP-ZZ-SK001 Rev. 000 CHECKLIST FOR RECEIPT OF A CREDIBLE IMMINENT AIRCRAFT THREAT NOTE: Imminent Aircraft threats are received from the NRC via the Emergency Notification System (RED phone).

1. LU Inform Security of the Imminent Aircraft Threat and implement OTO-SK-0000 1.

NOTE: The purpose of the Site Emergency is to promptly assemble non essential personnel and staff the emergency response facilities.

2. L3 DECLARE a SITE Emergency due to the Imminent Aircraft threat.

NOTE: When filling out the Sentry Notification, select "OTHER" under EAL Classification.

3. Li Implement the SITE Emergency in accordance with EIP-ZZ-00 102.

4. Li Determine based on information required whether there will be time to declare assembly in an effort to move people out of the Protected Area and away from the power block buildings.

4.1. Li If it is determined that there is ample time to assemble personnel (approximately 30 minutes), declare Accountability in accordance with EIP-ZZ-00230, Accountability.

4.1.1. L[ Once the accountability announcement has been made, advise personnel who use the accountability reader in the Field Office to assemble in the Control Room.

4.2. Li If it is determined there is not time to assemble personnel, make the following plant announcement:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A credible imminent aircraft threat towards Callaway Plant has been received. Place your work in a safe condition. Personnel in the power block should move to substantial rooms and structures below the 2000 elevation. Personnel outside of the power block should take cover in tornado shelter areas or other substantial structures."

(Repeat the announcement.)

Page I of 2 ATTACHMENT 4

EIP-ZZ-SKOO1

.Rev. 000

5. L1 Implement EIP-ZZ-00 102.

NOTE: Since the Control Room missile door is closed, emergency response personnel will not be able to enter the Control Room.

The Shift Supervisor will need to perform notifications to the off-site agencies.

6. LZ If the Shift Supervisor desires additional Control Room Support, then perform the following:

6.1. [] Notify SAS of the personnel needing to enter the Control Room via the HVAC room. This should include, as a minimum, the HPTS tech.

6.2. [] Have personnel entering the Control Room via the HVAC room frisk for contamination prior to entry. The frisker is located in the Emergency Equipment Locker in the Control Room.

7. [] All other emergency personnel responding to the Control Room or Field Office should report to the HPAC and await further instructions.

8. L] The Shift Supervisor (SS) MUST contact the Emergency Duty Officer (EDO).

The SS and EDO MUST review the considerations in Attachment 14, Considerations During a Security Event. The decision to implement any of the actions listed may be made based on the nature of the threat.

Page 2 of 2 ATTACHMENT 4

EIP-ZZ-SK00l Rev. 000 CHECKLIST FOR ARMED ATTACK ON CALLAWAY PLANT

1. LU Implement OTO-SK-00001, Plant Security Event.

2. L[ When the specific nature of the event can be established by Security, classify the emergency per EIP-ZZ-00 101, Classification of Emergencies.

2.1. Li If the Emergency Response Organization is to be called out (Alert or higher),

ensure the pager message # 12 is sent. This message includes instructions to report to the EOF initially, and NOT to report to the TSC until it has been determined that it is safe to do so. (ULNRC-04621)

3. LI When implementing Emergency Actions in accordance with EIP-ZZ-00 102, NO on-site announcement beyond the original CODE RED Announcement should be made until the event is terminated and restoration is in progress.

Page I of I ATTACHMENT 5

EIP-ZZ-SKOO 1 Rev. 000 DETERMINATION OF THE SUSPICIOUS NATURE OF PACKAGE, LETTER OR MAIL (CARS 200105909)

• Were you expecting this package or letter?

• Do you know anyone, or deal with any business, from the location form which the package/letter was mailed?

• Does the letter feel like it contains more than paper? Is it "lumpy"?

• Does the package/letter contain excessive postage?

0 Are the titles correct?

0 Is the package/letter addressed to only a title (no names)?

0 Are there misspellings of common words?

• Are there oily stains or discolorations on the package/letter?

0 The package/letter contains no return address.

0 A letter is in an unusually rigid envelope.

• Wires or tin foil are protruding from the package/letter.

0 Was the package/letter mailed from a foreign country, was it sent airmail or special delivery?

0 Does the package/letter contain restrictive markings, such as confidential, personal, etc.?

0 Is the address on the package/letter handwritten or poorly typed?

• Was an excessive amount of securing material, such as masking tape or string, etc., used?

0 Does the package/letter contain any strange odors?

• Is the packaging lopsided?

0 Does the package contain unusual or unexpected substance (e.g., white powder, vials with liquid, etc.)?

NOTE: These are general guidelines, and any one indicator does not necessarily indicate that a package may be a threat.

Page I of I ATTACHMENT 6

EIP-ZZ-SK001 Rev. 000 CHECKLIST FOR DISCOVERY OF A SUSPICIOUS PACKAGE, LETTER OR MAIL 1U The Shift Supervisor MUST make the following plant announcement:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A suspicious item has been discovered at CHOOSE ONE:

"All personnel, except those Security and other emergency responders MUST evacuate (Repeat)"

OR, "The item has been isolated at , all plant personnel MUST avoid this area. No additional actions by plant personnel are required at this time."

(Repeat the announcement.)

3. U Determine if the package, letter or mail is suspicious using Attachment 6 to EIP-ZZ-SKOO 1, "Determination of the Suspicious Nature of Package, Letter or Mail."

4. Ul If it is determined that the package contains other material that has the potential to threaten plant personnel, a determination MUST be made as to whether an emergency classification needs to be made in accordance with EIP-ZZ-00101, Classification of Emergencies.

NOTE: Additional security actions will be in accordance with Security Post Instructions.

Page I of I ATTACHMENT 7

EIP-ZZ-SKOO1 Rev. 000 CHECKLIST FOR DISCOVERY OF A BOMB OR INCENDIARY DEVICE 1I The Shift Supervisor MUST make the following plant announcement:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A potential explosive device has been discovered at . All plant personnel, except those emergency response personnel responding to the device MUST avoid the following location(s): ."

(Repeat the announcement.)

2. [] When the specific nature of the even can be established by Security, classify the emergency per EIP-ZZ-00101, Classification of Emergencies.

3. Ul Security actions will be in accordance with applicable Security Post Instructions.

Page I of I ATTACHMENT 8

EIP-ZZ-SK001 Rev. 000 CHECKLIST FOR HOSTAGE/DURESS SITUATIONS (ULNRC-04621)

1. Li Instructions for the Shift Supervisor

2. L3 Advise the Shift Security Supervisor of the Hostage/Duress Situation.

3. Li Make the following plant announcement:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A Security Emergency is in progress in the area of . All plant personnel should avoid this/these area(s).

(Repeat announcement.)

4. Q Advise the Shift Security Supervisor to establish a clear area around the hostage/duress location to ensure the safety of personnel who may walk near the area.

5. Li Determine if the person being held hostage has a spouse, relative, or other significant relation working at Callaway Plant. If so, advise the individual's supervisor or the Shift Security Supervisor to go to that person, discuss the situation with them, observe them placing their work in a safe condition, and then escort them to a safe location where they can be observed by Security personnel (preferably outside of the Protected Area).

6. Li Do not take any actions that may increase the stress level of the hostage taker(s).

7. Li If necessary, talk to the hostage taker(s), but do not make any commitments or agreements until a professional hostage negotiator from law enforcement arrives on site and takes over communication with the hostage taker(s).

8. Li Security actions will be taken in accordance with Security Post Instructions.

Page I of I ATTACHMENT 9

EIP-ZZ-SK001 Rev. 000 CHECKLIST FOR INDICATIONS OF POSSIBLE ACTS OF SABOTAGE, VANDALISM, MALICIOUS MISCHIEF, OR EQUIPMENT TAMPERING

1. L[ Determine if a danger to plant personnel exists. If a danger to plant personnel does exist, make the following announcement to ensure personnel are removed from the area:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A Security Event is in progress in the area of__ All plant personnel should avoid this/these area(s).

(Repeat announcement.)

2. Ll Direct the Shift Security Supervisor to barricade the area and post a Security Officer in a safe location to ensure the area is not tampered with further.

3. L] In conjunction with the EDO and Shift Security Supervisor, determine if the situation constitutes a credible threat. If it is determined that a credible threat exists, classify the emergency per EIP-ZZ-00 101, Classification of Emergencies.

4. L[ In conjunction with the EDO, determine whether an ERT needs to be convened.

Page I of I ATTACHMENT 10

EIP-ZZ-SKOO1 Rev. 000 BOMB OR EXTORTION THREAT CREDIBILITY GUIDANCE A bomb or extortion threat MUST be considered credible if any of the following have occurred:

A. A specific organization or group claims responsibility.

B. The threat is one of a pattern of harassing threats.

C. The notification of the threat has come from the NRC, and they consider the threat credible.

D. The notification of the threat has come from a local law enforcement agency or the FBI, and they consider the threat credible.

E. The threat is deemed credible by the SS/EDO (Section II of this attachment may be used as guidance in judging a threat's credibility).

II. Based on the threat information, the following questions should be considered when judging threat credibility:

A. Is there a deadline or specific time to deal with the situation?

B. Has a specific location for the bomb been given? If so, is the location credible?

C. Is the threat specific as to the type of device?

D. Does the threat express concern over possible injury to people?

E. Are there basic inconsistencies or major factual errors that would indicate non-credibility?

F. Is the threat infeasible or otherwise incredible, or is it capable of being carried out?

G. Do appropriate local law enforcement agencies, the FBI, or the NRC have any additional information to lend credibility to the threat?

H. Have any recent events occurred that may lend greater credibility to the event in question?

Page 1 of I ATTACHMENT 11

EIP-ZZ-SK001 Rev. 000 CHECKLIST FOR BOMB OR EXTORTION THREAT

1. L Advise the Shift Security Supervisor of the threat and the need to report the threat to Local Law Enforcement Agencies and take necessary action in accordance with the Callaway Plant Security Plan and implementing procedures.

2. Ll Determine the credibility of the threat utilizing the guidance provided on Attachment 11, Bomb or Extortion Threat Credibility Guidance. If it is determined that the threat is not credible, stop here.

3. Ll If the threat is determined to be credible:

4. L[ Implement EAL Group 3(A), Confirmed Security Event which indicates a potential degradation in the level of safety at the plant in accordance with EIP-ZZ 00101, Classification of Emergencies.

5. Li Evaluate the nature of the threat and make a determination if there is a potential threat to the health and safety of any plant personnel.

6. Ll If the nature of the threat is immediate and time for evacuation of personnel does not exist, the following plant announcement should be made:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. An Immediate Security Threat has been received. Place your work in a safe condition and take cover.

Wait for additional announcements."

(Repeat the announcement.)

7. Li If the nature of the threat is such that it does not involve an immediate danger to the general plant population, and the threat does not contain an insider component, the following plant announcement should be made:

SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A credible security threat towards Callaway Plant has been received. The nature of this threat is such that general plant personnel are not deemed to be at immediate risk. All plant personnel should heighten their awareness and stand-by for additional announcements."

(Repeat the announcement.)

8. Qi If the location of the bomb is identified, the following plant announcement should be made:

Page 1 of 2 ATTACHMENT 12

EIP-ZZ-SK001 Rev. 000 SOUND THE PLANT EMERGENCY ALARM "Attention all personnel, attention all personnel. A credible bomb threat has been received. All personnel working in (Plant Location)

MUST place your work in a safe condition and exit the area."

(Repeat the announcement.)

9. EI Direct Security to implement their Bomb Threat Post Instruction.

10. Lii The Shift Supervisor (SS) MUST contact the Emergency Duty Officer (EDO).

The SS and EDO MUST review the considerations in Attachment 13, Considerations During a Security Event. The decision to implement any of the actions listed below may be made based on the nature of the threat.

Page 2 of 2 ATTACHMENT 12

EIP-ZZ-SK001 Rev. 000 THREAT REPORT FORM IF POSSIBLE HAVE SOMEONE ELSE MONITOR CALL. NOTIFY SECURITY AND OPERATING SUPERVISOR BY CALLING EXT. 9911. FILL OUT FORM COMPLETELY AND GIVE TO SECURITY AS SOON AS POSSIBLE AFTER RECEIVING THE THREAT.

EXACT WORDING OF THE THREAT:

REMARKS:

BACKGROUND SOUNDS:

_ _ Street noises Music _ _ Animal noises Long Distance

__Crockery House noises ___ Factory mach. Booth Voices Motor Clear Other PA System Office Machinery Static Local CALLER'S VOICE:

Calm - Laughing Lisp ___ Cracking Voice Angry Crying Raspy ___ Disguised Excited Normal Deep Accent Slow Distinct High Familiar Rapid Slurred ___ Ragged If voice is familiar Soft Nasal __Clearing throat who did it sound like?

Loud Stutter Deep breathing THREAT LANGUAGE:

- Well spoken __ Foul Incoherent _ _ Message read by (educated) Irrational __ Taped threat maker QUESTIONS TO ASK

1. What is the nature of the threat; bomb, hostage, or extortion? (circle 1)

2. When is bomb going to explode?

3. Where is it located (what building)?

4. What does it look like?

5. What kind of bomb is it?

6. What will cause it to explode?

7. Did you place the bomb?

8. What are your demands?

9. How many hostages?

10. Who are the hostages?

I. Where are hostages located?

12. Why?

13. What is your address?

14. What is your name?

15. Sex of Caller Age Race SS/OS NotifiedTime Notified Name of Person Receiving CallTelephone Number Call Received On Time of CallDate of CallLength of Call CA-#103 Page 1 of 1 ATTACHMENT 13

EIP-ZZ-SK001 Rev. 000 CONSIDERATIONS DURING A SECURITY EVENT (COMN 41721) o Contact Corporate Communications and advise that a security event has occurred, that an Emergency Classification has been declared (as applicable), and a plant announcement has been made to alert plant personnel.

u Consider the potential impact on plant and security operations.

u Consider the extent of possible damage to the plant.

u Consider the impact possible damage will have on the health and safety of the public.

o Consider upgrading an Unusual Event to an ALERT to call in additional support and staff the Emergency Response Facilities.

u Consider obtaining additional resources:

Local Law Enforcement Additional Security Personnel Additional Fire Department Assistance Additional EMT/Medical support Ambulances o Consider staffing the backup EOF at the SEMA Headquarters in Jefferson City.

o Consider partial activation of the EOF and JPIC to handle press inquiries.

u Consider calling in key personnel listed below to evaluate additional actions that may need to be taken and to assess possible effects of the threat to plant safety. Depending on the nature of the threat, these personnel may be directed to report to the EOF or the TSC.

Plant Manager Recovery Manager Tech Assessment Coordinator Engineering Manager Superintendent, Protective Services Health Physics Coordinator Manager, Operations Support Operations Support Coordinator Any other o Consider calling out the Emergency Response Organization.

u Consider taking measures to establish Containment Integrity.

o Consider closing any open missile shields.

u Consider evacuating unnecessary personnel or evacuation of plant areas that may be affected by the threat.

Page I of I ATTACHMENT 14