ML19289D195

NRC Controlled Unclassified Information (CUI) Update (October 17, 2019)

ML19289D195
Person / Time
Issue date:	10/17/2019
From:	Tanya Mensah, John Moses Governance & Enterprise Management Services Division
To:
Rowley J
Shared Package
ML19289D095	List: ML19289D195 ML19289D260
References
Download: ML19289D195 (9)

Text

NRC Controlled Unclassified Information (CUI) Update October 17, 2019 John Moses, NRC CUI Senior Agency Official Tanya Mensah, Controlled Unclassified Information Program Manager

Key Messages

• Controlled Unclassified Information (CUI) will replace the NRCs current Sensitive Unclassified Non-Safeguards Information (SUNSI) program in the fall of 2021.

• During the transition to the CUI program, all elements of the NRCs existing SUNSI program will remain in place.

• The NRC is committed to minimizing the impact of this transition for NRC internal and external stakeholders, where feasible.

Status

• NRC Policy: A high-level NRC CUI Policy Statement is expected to be published in June 2020.

• Guidance: MD 12.6, NRC Controlled Unclassified Information (CUI) Program, is expected to be published in July 2020.

• NRC CUI Rulemaking: To support the NRCs transition to CUI, the NRC plans to replace explicit references to SUNSI with more generalized terms.

• CUI Training: The NRC will develop and provide CUI Basic Awareness Training for all NRC staff, contractors, and detailees to take prior to implementing CUI at the NRC.

Licensee Handling of CUI

• CUI includes only information the government creates or possesses, or that an entity creates or possess on behalf of the government (e.g. a contractor).

• Licensees will only have to apply CUI controls to information received from the federal government pursuant to a written agreement or arrangement.

• Licensees will continue to comply with the markings specified in NRC regulations. Examples include:

- 10 CFR 2.390, Public inspections, exemptions, requests for withholding

- 10 CFR Part 73, Physical Protection of Plants and Materials 4

NRC CUI Public Meeting The NRC staff held a public meeting on July 25, 2019 to:

• Discuss the NRCs plans to transition to CUI.

• Solicit input on written agreements and technical solutions (e.g., secure online portal) for the NRC to share CUI efficiently.

• NRC CUI Public Meeting Summary

- ADAMS Accession No. ML19211B785 (dated September 5, 2019)

Future Meeting Topics

• Written Agreements

• NIST Special Publication 800-171, Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organization.

• Licensee Handling of CUI

• Other topics, as recommended

Next Steps

• Continue to coordinate with other federal agencies and non-executive branch entities

• Develop a consistent approach to establish written agreements

• Further define the process that the NRC will use to share CUI with non-executive branch entities

• Propose timeframes for future NRC CUI public meetings

How Can You Obtain Additional Information?

- Participate in future NRC CUI public meetings

- Visit the NRC CUI public website

• (https://www.nrc.gov/reading-rm/cui.html)

- Send an email to CUI@nrc.gov 8

Questions and Comments