ML18114A038

Letter-NRC Interim Approval to Operate Louisiana Energy Services LLC (Dba Urenco Usa'S (Uusa)) Classified Cyber Networks

ML18114A038
Person / Time
Site:	07003103
Issue date:	04/26/2018
From:	Jacob Zimmerman NRC/NMSS/DFCSE/ECB
To:	Padgett W Louisiana Energy Services
Sturzebecher K
Shared Package
ML18114A094	List: ML18114A038
References
Download: ML18114A038 (3)

Text

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 April 26, 2018 Mr. Wyatt Padgett Licensing and Performance Assessment Manager Louisiana Energy Services, LLC P.O. Box 1789 Eunice, NM 88231

SUBJECT:

U.S. NUCLEAR REGULATORY COMMISSION INTERIM APPROVAL TO OPERATE CLASSIFIED CYBER NETWORKS

Dear Mr. Padgett:

By letter (LES-17-00151-NRC) dated November 20, 2017, (Agencywide Documents Access and Management System [ADAMS] Accession Number ML17328A513), as supplemented by letter dated April 13, 2018 (ADAMS ML18108A113), Louisiana Energy Services, LLC, doing business as URENCO USA (UUSA) submitted License Amendment Request (LAR) 17-02, to revise License Condition 10 of Special Nuclear Material (SNM) License SNM-2010 and the Informational System Security Plan (ISSP).

The current Authorization to Operate (ATO) for the UUSA classified cyber networks expires on April 28, 2018. The documentation provided to the U.S. Department of Energy (DOE) by UUSA in the referenced documents is lacking information (discussed below) and an action by UUSA is required to support a new ATO.

In order to allow continued operation of these networks, the U.S. Nuclear Regulatory Commission (NRC) staff, in coordination with subject matter experts from DOE Nuclear Energy Oak Ridge Site Office (NE-ORSO), as Authorizing Official (AO) for UUSA classified computer networks, is authorizing an Interim Approval to Operate for the Plant Control System, the Centrifuge Monitoring System (CMS) and Medium Frequency Drive, the Plant Control Training System (PCTS) and Enhanced Training System (ETS) (PCTS-ETS) classified cyber networks and their associated ISSP for the processing up to, and including, Confidential Restricted Data, for ninety (90) days from April 28, 2018.

During this ninety-day period, UUSA must submit the needed information in an updated CMS and PCTS-ETS ISSP to address the following comments:

• Section 4, General System Description/Purpose - Add a description of the Centrifuge Monitoring System Training System (CMSTS) in this section.

Document Transmitted Contains Security Related Information. When separated from the Enclosures, this document is decontrolled.

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION W. Padgett 2

• Section 7, Minimum Security Controls - Identify the applicable security controls for the CMSTS. If these security controls do not apply to CSMTS, then provide the justification for this exception.

• Figures 1, Plant Control Training System Network Diagram, and Figure 2, Technical Service Building Training Control Room Layout - Add the CMSTS to the system Diagram in these Figures.

Also, UUSA must revise the Plan of Actions and Milestones for Classified Systems, Revision 0, provided in the referenced April 13, 2018 letter, to address the enclosed comments (blue font).

Successful completion of these activities will allow DOE NE-ORSO, as AO, to issue an ATO for these systems for an additional three (3) years, and the NRC staff to complete and issue the license condition found in LAR 17-02.

In accordance with Title 10 of the Code of Federal Regulations Section 2.390 of the NRCs Agency Rules of Practice and Procedure, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publically Available Records component of the NRCs ADAMS. ADAMS is accessible from the NRC Web Site at http://www.nrc.gov/reading-rm/adams.html.

The enclosures contain sensitive, unclassified information and are therefore deemed Official Use Only - Security Related Information. They will not be placed in the Public Document Room, nor will they be publicly available in the ADAMS.

If you have any questions regarding this matter, please contact Mr. Karl Sturzebecher at 301-415-8534, or via email at Karl.Sturzebecher@nrc.gov.

Sincerely,

/RA/

Jacob I Zimmerman, Chief Enrichment and Conversion Branch Division of Fuel Cycle Safety, Safeguards, and Environmental Review Office of Nuclear Material Safety and Safeguards Docket No. 70-3103 License No. SNM-2010

Enclosure:

DOE Enclosure cc:

Jim Hutson, DOE Randy DeVault, DOE OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION W. Padgett 3

SUBJECT:

U.S. NUCLEAR REGULATORY COMMISSION INTERIM APPROVAL TO OPERATE CLASSIFIED CYBER NETWORKS DATED: April 26, 2018 DISTRIBUTION:

FCSE r/f ECB r/f JKEverly, NSIR LPitts, RII MSykes, RII TVukovinsky, RII ADAMS Package Accession Number: ML18114A094 *via e-mail OFFICE FCSE/ECB FCSE/ERB NSIR FCSE/ECB NAME KSturzebecher AWalker-Smith DParsons

• JZimmerman DATE 4/26/2018 4/25/2018 4/25/2018 4/26/2018 OFFICIAL RECORD COPY OFFICIAL USE ONLY - SECURITY RELATED INFORMATION