ML18235A275
| ML18235A275 | |
| Person / Time | |
|---|---|
| Site: | 07007004 |
| Issue date: | 08/06/2018 |
| From: | Toelle S Centrus Energy Corp |
| To: | Marissa Bailey Document Control Desk, Division of Security Operations |
| References | |
| AC 18-0005, EPID C-2018-CYB-0000 | |
| Download: ML18235A275 (2) | |
Text
Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only
...... 9 Q ID ID
- /t8ntrus Fueling the Future of Nuclear Power August 6, 2018 AC 18-0005 A TIN: Document Control Desk Ms. Marissa G. Bailey Director, Division of Security Operations Office of Nuclear Security and Incident Response U.S. Nuclear Regulatory Commission Washington, DC 20555-0001 American Centrifuge Plant Docket No. 70-7004; License No. SNM-2011 Supplement for Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan (Enterprise Project Identifier: C-2018-CYB-OOOO)
INFORMATION TRANSMITTED HEREWITH IS PROTECTED FROM PUBLIC DISCLOSURE AS SECURITY RELATED INFORMATION PURSUANT TO 10 CFR 2.390(d)(l).
Dear Ms. Bailey:
In accordance with Reference 1, Centrus Energy Corp. (Centrus) Headquarters (HQ) hereby submits comment resolution and a revised cyber security plan SP-HQ-0008, Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan, to the U.S. Nuclear Regulatory Commission (NRC) for final review and approval.
Additionally, based Reference 1, NRC's review of SP-HQ-0007, Baseline Security Controls &
Standards for Centrus Energy Classified Cyber Security Plans, should be terminated.
By letter dated January 25, 2018, (Reference 2), Centrus requested a 180-day Interim Authorization to Operate (JATO) to allow the Centrus HQ classified network to continue to operate while the HQ cyber security plan was updated.
By letter dated February 1, 2018 soDlf\\-;
(Reference 3), NRC approved the JATO, through July 30, 2018. Centrus' Information Security, 1Clf2D8 Manager suspended all access to the Centrus HQ Classified network on July 30, 2018.
CV.) provides the resolution to the comments provided to Centrus by Reference 1. The revised cyber security plan SP-HQ-0008 is provided as Enclosure 2.
Document herewith contains Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only When separated from Enclosures 1 and 2, this letter is UNCLASSIFIED.
Centrus Energy Corp.* 6901 Rockledge Drive, Suite 800, Bethesda, MD 20817-1867
- T 301-564-3200
- F 301-564-3201
- centrusenergy.com iJiVJ)7 wS //Z
Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only Ms. Marissa G. Bailey August 6, 2018 AC 18-0005, Page 2 Enclosures 1 and 2 contain Security-Related Information and in accordance with the guidance provided by the U.S. Department of Energy (DOE), they also contain Official Use Only information. Centrus requests that Enclosures 1 and 2 be withheld from public disclosure pursuant to 10 CFR 2.390(d)(l).
Centrus respectfully requests NRC review of these revised cyber security plan be completed at your earliest convenience to allow the DOE accreditation and NRC approval allowing classified cyber operations to resume at Centrus HQ. If you have any questions reg~rding this matter, please contact me at (301) 564-3250.
Sincerely,
~i{J~fv Steven A. Toelle Director, Regulatory Affairs
Enclosures:
As stated
References:
- 1. NRC letter from J. Zimmerman to S. Toelle (Centrus) regarding Acceptance Review of Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan Approval Request (Enterprise Project Identifier: C-2018-CYB-OOOO), dated August 2, 2018
- 2. Centrus letter (AC 18-0002) from S. Toelle to J. Zimmerman (NRC) regarding Centrus Energy Corp. Headquarters Classified Administrative Thin Client System Security Control Security Plan, dated January 25, 2018
- 3. NRC letter from J. Zimmerman to S. Toelle (Centrus) regarding Approval of Centrus Energy Corp. Request For A 180-Day Interim Authorization To Operate Its Headquarters Classified Network (Enterprise Project Identification: L-20 l 8-SPR-0000), dated February 1, 2018 cc:
R. De Vault, DOE ORO K. Everly, NRC HQ Y. Faraz, NRC HQ J. Hutson, DOE ORO
. L. Pitts, NRC Region II S. Rice, DOE ORO
- 0. Siurano-Perez, NRC HQ Document herewith contains Security-Re.lated Information -*withhold Under 10 CFR 2.390 Official Use Only When separated from Enclosures I and 2, this letter is UNCLASSIFIED.