ML19158A101
| ML19158A101 | |
| Person / Time | |
|---|---|
| Site: | 07007004 |
| Issue date: | 06/05/2019 |
| From: | Robert Williams NRC/RGN-II/DFFI |
| To: | Wiehle K American Centrifuge Operating |
| References | |
| IR 2019401 | |
| Download: ML19158A101 (9) | |
Text
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION UNITED STATES NUCLEAR REGULATORY COMMISSION REGION II 245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 June 5, 2019 Ms. Kelly L. Wiehle Regulatory Manager American Centrifuge Operating, LLC Lead Cascade Facility and American Centrifuge Plant 3930 U.S. Route 23 South P. O. Box 628 Mail Stop 7560 Piketon, OH 45661
SUBJECT:
AMERICAN CENTRIFUGE OPERATING, LLC, CENTRUS HEADQUARTERS FACILITY, NUCLEAR REGULATORY COMMISSION INSPECTION REPORT NUMBER 70-7004/2019-401
Dear Ms. Wiehle:
This letter refers to the information security inspection conducted on May 7, 2019, at the CENTRUS headquarters facility in Bethesda, MD. The purpose of this inspection was to determine whether activities authorized under the license were conducted safely, securely and in accordance with Nuclear Regulatory Commission (NRC) requirements. The enclosed report presents the results of this inspection. These results were discussed with you and members of your staff at exit meetings held on May 7, 2019.
During the inspection, the NRC staff examined activities conducted under your license as they related to protection of classified information and to confirm compliance with the Commissions rules and regulations, and with the conditions of your license. Areas examined during the inspections are identified in the enclosed report. Within these areas, the inspections consisted of selected examination of procedures and representative records, observations of activities, and interviews with personnel.
Based on the results of the inspections, no violations of more than minor significance were identified.
The material enclosed herewith contains Security-Related Information associated with the Classified Information Security safeguards program at the CENTRUS Headquarters Facility, and in accordance with 10 CFR 2.390(d)(1), its disclosure to unauthorized individuals could Enclosure(s) transmitted herewith contain(s) SUNSI. When separated from enclosure(s),
this transmittal document is decontrolled.
LIMITED INTERNAL DISTRIBUTION PERMITTED OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION K. Wiehle 2 present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room, or from the NRC's Agencywide Documents Access and Management System (ADAMS); accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html.
Should you have any questions concerning this inspection, please contact Leonard Pitts of my staff at 404-997-4708.
Sincerely,
/RA/
Robert E. Williams, Jr., Chief Projects Branch 1 Division of Fuel Facility Inspection Docket No. 70-7004 License No. SNM-2011
Enclosure:
NRC Inspection Report Number 70-7004/2019-401 w/
Attachment:
Supplemental Information cc: See next Page OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION K. Wiehle 3 cc:
Larry Cutlip Senior Vice President, Field Operations Two Democracy Center 6901 Rockledge Drive, Suite 800 Bethesda, MD 20817 Mike Whitehurst Facility Security Officer, CENTRUS HQ Office American Centrifuge Operating, LLC Two Democracy Center 6901 Rockledge Drive Suite 800 Bethesda, MD 20817-1818 R. M. DeVault Manager Regulatory Oversight Department of Energy Electronic Mail Distribution OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
ML19158A085 SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DFFI RII:DFFI RII:DFFI SIGNATURE KPK1 LWP1 REW1 NAME KKirchbaum LPitts R. .Williams DATE 6/3/2019 6/3/2019 6/4/2019 6/ /2019 E-MAIL COPY? YES NO YES NO YES NO
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION U. S. NUCLEAR REGULATORY COMMISSION REGION II Inspection Report Docket No.: 70-7004 Certificate No.: SNM-2011 Report No.: 70-7004/2019-401 Licensee: American Centrifuge Operating, LLC Facility: CENTRUS Headquarters Location: Bethesda, MD Date: May 7, 2019 Inspectors: L. Pitts, Senior Fuel Facility Inspector, DFFI (Section A.1)
K. Kirchbaum, Operations Engineer, DRS (Section A.1)
J. K. Everly, Senior Program Manager, NSIR (Section A.1)
R. DeVault, Subject Matter Expert, DOE (Section A.1)
S. Rice, Subject Matter Expert, DOE (Section A.1)
J. Hutson, Subject Matter Expert, DOE, Contractor (Section A.1)
Approved by: Robert E. Williams, Jr., Chief Projects Branch 1 Division of Fuel Facility Inspection OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION Enclosure
2 EXECUTIVE
SUMMARY
CENTRUS Energy Corporation Headquarters Facility NRC Inspection Report 70-7004/2019-401 May 7, 2018 The NRC conducted an announced classified matter inspection at the CENTRUS Energy Corporation headquarters in Bethesda, Maryland on May 7, 2019. The inspection involved the examination and implementation of the headquarters Standard Practice Procedures Plan (SPPP) for the protection of classified matter.
Safeguards
- CENTRUS headquarters staff implemented aspects of their classified matter protection program. No violations of more than minor significance were identified. (Paragraph A.1)
- CENTRUS headquarters staff implemented aspects of their Program Cyber Security Plan regarding the automated data processing systems program. No violations of more than minor significance were identified. (Paragraph A.1)
Attachment Key Points of Contact Inspection Procedures Used OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION 3
REPORT DETAILS A. Safeguards
- 1. Classified Material and Information Security (Inspection Procedures 81815 and 81820)
- a. Inspection Scope The inspectors conducted a walk-down of the CENTRUS headquarters closed area to verify that physical protection was in place to preclude unauthorized access to areas where CENTRUS classified material is handled and used. The inspectors verified that processes were in place to adequately control access to areas containing classified information.
The inspectors reviewed the CENTRUS headquarters storage and control of classified matter practices to verify that adequate protection remains in place for classified matter.
The inspection included a physical assessment of the CENTRUS headquarters closed area, a functional test and review of secure telephones and faxes, review of SF 700, Security Container Information, and SF 702, Security Container Check Sheet documentation for closed areas and security containers, classified key and lock control, and methods of destruction for classified material.
The inspectors reviewed all secure phones to ensure they were being handled and operated in accordance with the commitments contained in the CENTRUS headquarters Standard Practice Procedures Plan (SPPP). The inspectors reviewed the methods used for destruction of classified material were also found to meet the commitments contained in the CENTRUS headquarters SPPP.
The inspectors reviewed CENTRUS headquarters policies and procedures for the classification of information to verify that classification guide decisions were being made properly and those documents were continuing to be marked in accordance with the commitments contained in the CENTRUS headquarters SPPP. The inspectors reviewed a sample of documents taken from safes and no issues were identified.
The inspectors reviewed the CENTRUS headquarters intrusion alarm monitoring system for the protection of classified matter to verify that the system was functional and being operated in accordance with the commitments contained in their SPPP.
The inspectors reviewed the CENTRUS headquarters security of the automated data processing systems program to verify that classified data was protected while being processed on networks, printers and copy machines in accordance with the commitments contained their SPPP. The inspectors reviewed records associated with the CENTRUS headquarters users accounts. The CENTRUS headquarters classified network was found to be in compliance with its Department of Energy (DOE) accreditation.
The inspectors verified that the printers and copy machines used for classified processing were located within the closed area and marked or appropriately labeled with the highest classification and most restrictive category of classified data authorized to be processed on them.
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION 4
The inspectors reviewed the additional security programs added to the CENTRUS headquarters SPPP based on Nuclear Energy Institute (NEI) 08-11 Information Security Program Guidelines for Protection of Classified Material at Uranium Enrichment Facilities. The programs reviewed were Operations Security (OPSEC), Technical Surveillance Countermeasures (TSCM), Telecommunications Electronic Materials Protected from Emanating Spurious Transmissions (TEMPEST), Information Technology Security Requirements for Classified Networks, Counterintelligence, Classified Item Control and Inventory, and Armed Response to Information Compromise. The inspectors found that all of the NEI-08-11-related programs were being adequately implemented.
b. Conclusion
No violations of more than minor significance were identified.
B. Exit Meeting The inspection scope and results were summarized at exit meetings conducted on May 7, 2019. No dissenting comments were received from the licensee. Proprietary information was discussed but not included in the report.
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION SUPPLEMENTAL INFORMATION
- 1. KEY POINTS OF CONTACT Name Title L. Krause Alternate Facility Security Officer S. Toelle Director, Regulatory Affairs M. Whitehurst Facility Security Officer, CENTRUS Headquarters Office
- 2. INSPECTION PROCEDURES USED 81820 Physical Protection Facility Approval and Safeguarding of National Security Information (NSI) & Restricted Data (RD) 81815 Authorization for Access to National Security Information (NSI) & Restricted Data (RD)
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION Attachment