ML20050A638

From kanterella
Jump to navigation Jump to search
Responds to 800606 Memo to R Harris Re Payroll Sys Security Test.Plan Should Explicitly State Intent to Comply W/ Bulletin 2101-15.Facilities & Sys Security Branch Cannot Participate in Activity Until Sys Security Specialist Hired
ML20050A638
Person / Time
Issue date: 06/20/1980
From: Birch C
NRC OFFICE OF ADMINISTRATION (ADM)
To: Anne Frost
NRC OFFICE OF ADMINISTRATION (ADM)
Shared Package
ML20050A634 List:
References
FOIA-81-409 NUDOCS 8204010524
Download: ML20050A638 (1)


Text

_

/

C.

(

n

,\\

JUN 2 01980 j

IEMORA'IDUM FOR: Asa R. Frost, Jr., Chief ADP Management Systems Branch c

Division of Automatic Data ~ Processing Sup' port f

Office of Administration i

FROM:

Calvin L. Burch, Chief m

Facilities and Systems Security Branch Division of Security Office of Administration

SUBJECT:

PAYROLL SYSTEM SECURITY TEST

/

/

This is in reference to your memorandum, dated June 6,1980, subject as above, to Mr. Richard liarris of my branch.

4 The following coments are made on the " Test Plan for a Systems Security Integrity Study of the Automated Payroll System of the Nuclear Regulatory Conaission":

1.

The plan should explicitly state,that the payroll system test plan is intended to comply with the, provisions of NRC Bulletin 2101-15,

" Automated Systems Security Program for Sensitive' Data," dated j

Jan'Jary 10, 1980.

2.

Since the payroll system should not contain classified matter, the reference on Page 6, Section 2, a. and f. should be deleted.

However, 4 3..g )

should classified matter be included in the system, NRC Appendix 2101, Part XIII, which you reference on Page 6, last paragraph, would be applicable. Similarly, testing procedures should be established to ensure that blassified infomation is not contained in a " sensitive" system.

7' 3.

We note implicitly that some member of my branch would actively parti-cipate in the test process. ' llodever, because of manpower constraints, we cannot actively participate in this activity until we are able to a

hire a systems security specialist (computer security). We should be kept apprised of the results of the security test.

Please contact Dick jlarris or me on x74406 should you have any coaments regarding the above.

ORIGINAL 5[" ^

7.2G m

E SEC CEN FILE:

catylN L. DURC Calvin L. Burch.. Chief

,1 m >_

Far.ilitint.?nd 9ve f om '

.... F.S. S..B.. d.Y.......

...F.... [.,/.

Sect rity Brpach *:

. nc e *

........ 01 vi si orof Securltv " " - -- - -

~I

...T.l.N.r,r,i,si b.,,,C Q r

,,,,,,,,,,,,,, nf.r.1 c,.o f,' Admin.1strit.1 on...........

b i

A pn_qn A m'f/.

u.$

8204010524 811204 i.

.......~

~ PDR FOIA

..., ' " SHEARER 81-409 PDR

  • w *
  • a a - - a ' " '- "" - ' a ' ' " * ' " r ' "

,_,