ML18184A066
| ML18184A066 | |
| Person / Time | |
|---|---|
| Site: | 07007004 |
| Issue date: | 06/22/2018 |
| From: | Toelle S Centrus Energy Corp |
| To: | Marissa Bailey Document Control Desk, Office of Nuclear Material Safety and Safeguards, Office of Nuclear Security and Incident Response |
| References | |
| AC 18-0004 | |
| Download: ML18184A066 (2) | |
Text
- *
- Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only
- -::Centrus e
Fueling the Future of Nuclear Power June 22,2018 AC 18-0004 ATTN: Document Control Desk Ms. Marissa G. Bailey Director, Division of Security Operations Office of Nuclear Security and Incident Response U.S. Nuclear Regulatory Commission Washington, DC 20555-0001 American Centrifuge Plant Docket No. 70-7004; License No. SNM-2011 Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan and Baseline Security Controls & Standards for Centrus Energy Classified Cyber Security Plans INFORMATION TRANSMITTED HEREWITH IS PROTECTED FROM PUBLIC DISCLOSURE AS SECURITY RELATED INFORMATION PURSUANT TO 10 CFR 2.390(d)(l).
Dear Ms. Bailey:
The purpose of this letter is to submit SP-HQ-0008, Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan and supporting document SP-HQ-0007, Baseline Security Controls & Standards for Centrus Energy Classified Cyber Security Plans for U.S. Nuclear Regulatory Commission (NRC) review and approval.
The current Centrus HQ cyber security plan SP-HQ-0002, Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan, Revision l credited certain baseline security control functions contained in the American Centrifuge Operating (ACO) cyber security plan SP-3605-0009, American Centrifuge Classified Networks Baseline Security Control Security Plan. With the decommissioning of ACO's Piketon, Ohio, facility and the change in status of the facility to non-possessing, the Centrus HQ plan, SP-HQ-0002, required Updating to include the baseline security control functions previously credited from ACO's plan, SP-3605~0009*. By letter dated January 25, 2018, (Reference 1), Centrus requested a 180-day Interim Authorization to Operate (IA TO) to allow the Centrus HQ classified network to continue to operate while the HQ cyber security plan was updated. By letter dated February 1, 2018 (Reference 2), NRC approved the IATO.
Document herewith contains Security-Related Information:- Withhold Under 10 CFR 2.390 Official Use Only When separated from Enclosures 1 and 2, this letter is uncontrolled.
Centrus Energy Corp. 0 6901 Rockledge Drive, Suite 800, Bethesda, MD 20817-1867
- T 301-564-3200
- F 301-564-3201
- centrusenergy.com
Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only Ms. Marissa G. Bailey June 22, 2018 AC 18-0004, Page 2 SP-HQ-0008, Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan and SP-HQ-0007, Baseline Security Controls & Standards for Centrus Energy Classified Cyber Security Plans are provided as Enclosures 1 and 2, respectively. SP-HQ-0007 provides a set of common baseline security controls intended to be applicable to all Classified Cyber Systems and Networks throughout all Centrus sites and facilities.
Enclosures 1 and 2 contain Security-Related Information and in accordance with the guidance provided by the U.S. Department of Energy, they also contain Official Use Only information.
Centrus requests that Enclosures 1 and 2 be withheld from public disclosure pursuant to 10 CFR 2.390(d)(l). When separated from Enclosures 1 and 2, this letter is uncontrolled.
Centrus requests NRC approval of security plans SP-HQ-0007 and SP-HQ-0008. If you have any questions regarding this matter, please contact me at (301) 564-3250.
Sincerely, Steven A. Toelle Director, Regulatory Affairs
Enclosures:
As stated
References:
- 1. Centrus letter (AC 18-0002) from S. Toelle to J. Zimmerman (NRC) regarding Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan, dated January 25, 2018
- 2. NRC letter from J. Zimmerman to S. Toelle (Centrus) regarding Approval of Centrus Energy Corp. Request For A 180-Day Interim Authorization To Operate Its Headquarters Classified Network (Enterprise Project Identification: L-2018-SPR-OOOO), dated February 1, 2018 cc:
R. DeVault, DOE ORO K. Everly, NRC HQ Y. Faraz, NRC HQ J. Hutson, DOE ORO L. Pitts, NRC Region II S. Rice, DOE ORO
- 0. Siurano-Perez, NRC HQ Document herewith contains Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only When separated from Enclosures 1 and 2, this letter is uncontrolled.