ML20196G678

From kanterella
Jump to navigation Jump to search
Proposed Rules 10CFR50 & 73, Frequency of Reviews & Audits for Emergency Preparedness Programs,Safeguards Contingency Plans & Security Programs for Nuclear Power Reactors. Rules Would Require Licensees to Conduct Program Reviews & Audits
ML20196G678
Person / Time
Issue date: 07/08/1997
From: Thompson H
NRC OFFICE OF THE EXECUTIVE DIRECTOR FOR OPERATIONS (EDO)
To:
References
FRN-62FR40978, RULE-PR-50, RULE-PR-73 PR-970708, NUDOCS 9707170006
Download: ML20196G678 (20)


Text

. _ .__._ _ _ _ _ __ _. . . .._.

.T 4

.d I

DOCKETED USRR090-01-P]  ;

NUCLEAR REGULATORY COMMISSION 71 al 31 Pl2:44 10 CFR Parts 50 and 73 RIN 3150-AF63 0FFICE OF SECRETARY DOCKETING & SERVICE BRMK H '

Frequency of Reviews and Audits for Emergency Preparedness Programs.

Safeguards Contingency Plans, and Security Programs For Nuclear Power Reactors (PRM 50-59 and PRM 50-60)

AGENCY: Nuclear Regulatory Commission. DOCKET NLMBERn n PROPOSED RULE rn 60 4 73 ACTION: Proposed rule.

[la2/4Yof7K)

SUMMARY

The Nuclear Regulatory Commission is proposing to amend its regulations to change the frequency of licensees' independent reviews and 1

audits of their emergency preparedness programs, safeguards contingency plans, i

and security programs. This amendment is being proposed in response to l petitions for rulemaking submitted by Virginia Power Company. Specifically.

instead of conducting reviews every 12 months, as is currently required, the l proposed amendment would require nuclear power reactor licensees to conduct program reviews and audits in response to program performance indicators, or after a significant change in personnel, procedures, equipment or facilities,

! but in no case less frequently than every 24 months.

06Gfev /f / 99 7 .

DATES: Submit comments [in :rt det 75 deyr Micr p211 : tion in the rederal I j

negisterk Comments received after this date will be considered if it is hll l

practical to do so, but the Commission is able to assure consideration only I for comments received on or before this date.

(; qafr5-0 GA-

-q q p1 % fkpicaL lh#d a " TS"

'*  %. or, ,/ssl91

?001 L' 01I Mo

  • y

&qq

i' .

l i .. .

ADDRESSES: Comments may be sent to: Secretary, U.S. Nuclear Regulatory Commission. Washington, DC 20555-0001. Attention:

Rulemakings and Adjudications Staff.

Delher coments to: 11555 Rockville Pike, Rockville, Maryland, between 7:30 a.m. and 4:15 p.m. on Federal workdays.

For information on submitting coments electronically, see the  !

discussion under Electronic Access in the Supplementary Information Section.

Certain documents related to this rulemaking, including comments l

received, may be examined at the NRC Public Document Room. 2120 L Street NW.

(Lower Level), Washington, DC. These documents may also be viewed and i downloaded electronically via the Electronic Eulletin Board established by NRC

^

for this rulemaking as discussed under Electronic Access in the Supplementary 1

Information section.

FOR FURTHER INFORMATION CONTACT: Dr. Sandra D. Frattali, Office of Nuclear Regulatory Research, U.S. Nuclear Regulatory Comission, Washington, DC 20555- ,

0001. telephone (301)415-6261, e-mail sdf0nrc. gov.

SUPPLEMENTARY INFORMATION:

Background

On January 7,1994, the Comission docketed a petition for rulemaking from Virginia Power, dated December 30, 1993 (PRM-50-59) to change the required audit frequency for safeguards contingency plans and security programs at nuclear power reactors. On January 19, 1994, the Commission docketed, as a separate petition for rulemaking (PRM-50-60), Virginia Power's

s . au . . . . ..n. s.-s..-..- a n l

l request that the NRC change the required audit frequency for emergency preparedness programs at nuclear power reactor facilities, NRC published these two petitions for public comment in the Federal Register. PRM-50-59 was published on May 6, 1994 (59 FR 23641). PRM 50-60 was published on April 13. I 1994 (59 FR 17449).

The Comission's regulations currently require power reactor licensees l

, to conduct independent reviews and audits of each of these programs at least i l every 12 months. Virginia Power requested that the frequency be changed to l

l nominally every 24 months. This rulemaking addresses the issues raised in these petitions.

The Commission notes that although the petitioner uses the term " audit," l the emergency planning regulations use the term " program reviews." Further, the security program and safeguards contingency plan regulations also use l

" reviews." When describing what is required by a " review" of the physical security plan, the regulations use the term " audits" for some of the requirements. This rule change will continue to use the term " program reviews" for the emergency preparedness regulations and the safeguards contingency and security regulations. The use of the term " audit" in the l

requirements for the " reviews" of the safeguards contingency and security plans remains unchanged. The NRC understands that licensees have assumed that the term " audit" in Appendix C to Part 73 means a quality assurance (QA) audit l that conforms to their normal audit program requirements and American National I

Standards Institute (ANSI) standards such as ANSI N45.2. " Quality Assurance Programs for Nuclear Facilities;" ANSI N45.2.12. " Requirements for Auditing of Quality Assurance Programs for Nuclear Power Plants:" ANSI N45.2.33.

l " Qualifications of Quality Assurance Program Audit Personnel for Nuclear Power l

i

. . -- .. - - - - ._. .-_--- .. - .~.- - - - . -

4 i

4 Plants;" and ANSI N18.7, " Administrative Controls and Quality Assurance for the Operation Phase of Nuclear Power Plants." The NRC does not require that l these audits be performed by the 0A organization in accordance with the 0A program comitments for the conduct of the audits. As stated in the current rule, the NRC expects that these audits must be conducted by individuals who '

are qualified (technically competent) in the subject (s) being audited and are independent of the program (to assure objectivity and no conflict of l interest). At the licensee's option, the QA organization may perform, lead, or assist in these audits.

Along with the petitions for rulemaking related to security and emergency preparedness, Virginia Power submitted a third petition (PRM-26-1) to relax the existing audit (i.e. program review) frequency required for fitness-for-duty (FFD). Issues related to the FFD petition are being addressed in a separate NRC rulemaking.

Discussion Requirements pertaining to the review frequency of safeguard contingency plans by power reactor licensees are contained in S 50.54(p)(3) I and in Appendix C to Part 73.2 Section 50.54(p)(3) requires that licensees provide for a review of the safeguards contingency plan at least every 12 months by individuals who are independent of both security program management and personnel who have direct responsibility for implementation of the security program. This review must include a review and audit of safeguards 2

Note that this appendix is currently cited by both S 73.46, which applies to nuclear fuel licensees, and S 73.55 which applies to nuclear power ,

reactor licensees. This rulemaking applies only to nuclear power reactors.  !

J

contingency procedures and practices, an audit of the security system testing i and maintenance program, and a test of the safeguards systems along with comitments established for response by local law enforcement authorities.  ;

The current records retention period for the results of this rWiew and audit 1

in this section is 2 years. It is being changed to 3 years to correspond to the retention period for the same records in Appendix C.

1 In Appendix C to Part 73, the section entitled " AUDIT AND REVIEW"  !

requires a review of the safeguards contingency plan at intervals not to exceed 12 months. The review must include an audit of safeguardr, contingency  !

procedures and practices, and an audit of commitments established for response by local law enforcement authorities. The results of this review and audit must be maintained for a period of 3 years.

Requirements for security program reviews are contained in S 73.55(g)(4). This section requires that the security program be reviewed at

! least every 12 months by individuals independent of both security program management and personnel who have direct responsibility for the implementation of the security program. The review must include an audit of the security l procedures and practices, an evaluation of the effectiveness of the physical protection system, an audit of that system's testing and maintenance program. j and an audit of comitments established for response by local law enforcement authorities. The results of this review and audit must be maintained for a

! period of 3 years.

Requirements pertaining to the frequency of program reviews of the emergency preparedness program by nuclear power reactor licensees are l l contained in S 50.54(t). This section requires that licensees provide for a i review of their emergency preparedness program at least every 12 months by i

.. . .-- .- . - .- - - . = - = _ _ . . - . - - - - -.

persons who have no direct responsibility for implementation of the emergency ,

preparedness program. The review must include an evaluation for adequacy of interfaces with State and local governments, as well as the adequacy of licensee drills, exercises, capabilities, and procedures. The results of the review, along with recommendations for improvement, must be documented, reported to the licensee's corporate and plant management, and must be retained for a period of 5 years.  !

The Virginia Power petitions requested that the regulations be amended i to change the frequency of the required audit (i.e. program review) from at l least every 12 months to nominally every 24 months with additional audits if l performance warranted. NRC has carefully reviewed the arguments presented by the petitioner and the public comments that were submitted on the petitions, f i

The NRC is proposing to resolve the petitions with regard to 10 CFR Part 50 licensees by initiating this rulemaking. The proposed rule incorporates the petitions in part, and modifies some petition requests in response to the public coments as indicated in the following discussion.

Twenty-eight public comments resulted from the publication of the petitions in the Federal Register. Of these, 9 coments concerned the safeguards contingency plan and the security program. and 19 concerned the emergency preparedness program.

l All the coments on the security program were from the nuclear industry l

l and supported the petition. Of the 19 public comments on emergency

preparedness, 17 were from the nuclear power industry and supported the

). petition. Two were from States, who expressed some concern with lengthening the period between reviews. The States' concern has been addressed in this

)

! proposed revision by clarifying that more frequent, focused program reviews

and audits may be required based on an assessment of security or emergency preparedness by the licensee against performance indicators, or after a  :

significant change in personnel, procedures, equipment, or facilities.

l The NRC staff is proposing changing the regulations, which will reduce the burden on the licensees without affecting public health and safety, for

the following reasons.

First, after these rules were first implemented, industry performance improved to the point that annual program reviews and audits are not necessary i to ensure that the emergency preparedness programs, safeguards contingency f

plans, or security programs are adequate. Inspection findings and enforcement actions, licensee perfvmance during exercises and operational safeguards response evaluation, and the systematic assessment of licensee performance (SALP) evaluations indicate sufficient improvement to justify the reconmended reduction in audit burden. Furthermore, if a licensee *s program is in fact l

not performing properly, the proposed changes could result in audits more j frequently than every 24 months. l Second, the current requirements for annual reviews and audits result in a lack of licensee flexibility, which can compromise the completion of effective audits. Licensees are currently limited in their ability to allocate audit resources according to safety needs and priorities, because l available resources and personnel must be committed according to a set review and audit schedule, rather than used to monitor or assess other areas of concern. In addition, licensees are not always able to conduct reviews and i I

audits at the same time as other activities. Concurrent scheduling with l

activities such as separately scheduled drills, inspections, or operational activities would permit a better review and evaluation of plant systems. This t

l

can lead to reviews and audits of little or marginal benefit, or the need to perform extra reviews and audits to reconfirm that a program is still adequate after there has been a change. It can also lead to auditing before corrective actions are completed, when waiting a short time could allow the review and audit to be done when the effectiveness of a corrective action can be evaluated.

Third, the current requirements concerning review and audit frequency are inconsistent with recent regulatory trends, which have moved toward performance-based requirements that focus attention on action to correct demonstrated weaknesses rather than schedule-driven needs. By establishing performance-based criteria for triggering reviews and audits, the NRC staff's resolution to PRM-50-59 and PRM-50-60 would be consistent with recent recomendations of the NRC Regulatory Review Group, the National Performance Review, and the proposed amendments that were published in the Federal Register on May 9. 1996 (61 FR 21105), to resolve the FFD audit frequency  !

petition for rulemaking, PRM-26-1. This approach is intended to promote flexibility and efficiency in nuclear facility operations while maintaining l

the highest standards of public health and safety. Both NRC policy directives and Congressional action emphasize the need for the Commission to move toward performance-based regulations.

As a result, the NRC staff proposes to revise the regulations to require that licensees conduct focused program reviews and audits as needed, based on an assessment by the licensee against performance indicators or in response to a significant change in personnel, procedures, equipment, or facilities, and f that all program elements are reviewed and audited at least every 24 months.

These changes are consistent with the requested changes in the two petitions

9 for rulemaking (PRM 50-59 and PRM 50-60) and will promote performance-based rather than compliance-based review and audit activities.

The proposed changes will further clarify that programs must be reviewed and audited following a significant change in personnel, procedures, or l equipment as soon as reasonably practicable, but no later than 12 months after .

the changes. The purpose of these focused audits would be to ensure that changes have not adversely affected the operation of the particular program element or function in question.

Accordingly, this proposed rule would better l ensure that programmatic problems will be detected and corrected on a timely basis and that program reviews and audits are based on specific performance l indicators rather tnan on rigidly specified time limits.

It is anticipated that a regulatory guide may be necessary. The NRC specifically requests public coments on suggested performance indicators appropriate for the emergency preparedness and security programs that would amplify the regulation.

Electronic Access Comments may be submitted electronically, in either ASCII text or Wordperfect format (version 5.1 or later), by calling the NRC Electronic

! Bulletin Board (BBS) on FedWorld or connecting to the NRC interactive rulemaking web site, "Rulemaking Forum." The bulletin board may be accessed l using a personal computer, a modem, and one of the commonly available i

communications software packages, or directly via Internet. Background

documents on the rulemaking are also available, as practical, for downloading and viewing on the bulletin board.

I i-

If using a personal computer and modem, the NRC rulemaking subsystem on FedWorld can be accessed directly by dialing the toll free number (800) 303-9672. Communication software indicators should be set as follows: parity to none, data bits to 8, and stop bits to 1 (N,8,1). Using ANSI or VT-100 terminal emulation, the NRC rulemaking subsystem can then be accessed by selecting the " Rules Menu" option from the "NRC Main Menu." Users will find the "FedWorld Online User's Guides" particularly helpful. Many NRC subsystems i

and data bases also have a " Help /Information Center" option that is tailored to the particular subsystem.

l The NRC subsystem on FedWorld can also be accessed by a direct dial phone number for the main FedWorld BBS, (703) 321-3339, or by using Telnet via Internet: fedworld. gov. If using (703) 321-3339 to contact FedWorld, the NRC subsystem will be accessed from the main FedWorld menu by selecting the

" Regulatory. Government Administration and State Systems," then selecting .

" Regulatory Information Mall." At that point, a menu will be displayed that has an option "U.S. Nuclear Regulatory Comission" that will take you to the NRC Online main menu. The NRC Online area also can be accessed directly by I typing "/go nrc" at a FedWorld command line. If you access NRC from FedWorld's main menu, you may return to FedWorld by selecting the " Return to FedWorld" option from the NRC Online Main Menu. However, if you access NRC at FedWorld by using NRC's toll-free number, you will have full access to all NRC systems, but you will not have access to the main FedWorld system.

l If you contact FedWorld using Telnet, you will see the NRC area and

{ menus, including the Rules Menu. Although you will be able to download documents and leave messages, you will not be able to write coments or upload files (comments). If you contact FedWorld using FTP, all files can be 4 i a

d

-- .. . . - . . - - _ - - . _ - . ~ . - . . . - - . - - - -

l ,

l accessed and downloaded but uploads are not allowed; all you will see is a l

list of files without descriptions (normal Gopher look). An index file listing all files within a subdirectory, with descriptions, is available.

l There is a 15-minute time limit for FTP access. i l Although FedWorld also can be accessed through the World Wide Web, like l FTP, that mode only provides access for downloading files and does not display the NRC Rules Menu.

You may also access the NRC's interactive rulemaking web site through the NRC home page (http://www.nrc. gov). This site provides the same access as the FedWorld bulletin board, including the facility to upload coments as '

l files (any forraat), if your web browser supports that function.

! For more information on NRC bulletin boards call Mr. Arthur Davis, Systems Integration and Development Branch, NRC, Washington, DC 20555-0001, telephone (301) 415-5780: e-mail AXD3@nrc. gov. For information about the interactive rulemaking site, contact Ms. Carol Gallagher, (301) 415-5905:

1

! e-mail CAG@nrc. gov.

l Environmental Impact: Categorical Exclusion l The Comission has determined that this proposed rule is the type of action described as a categorical exclusion in 10 CFR 51.22 (c)(3)(i).

Therefore, neither an environmental impact statement nor an environmental assessment has been prepared for this proposed rule.

4 Paperwork Reduction Act Statement This proposed rule amends information collection requirements that are subject to the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). This rule has been submitted to the Office of Management and Budget for review and approval of the paperwork requirements.

Because the rule will reduce existing information collection requirements, the public burden for this collection of information is expected to be decreased by approximately 275 hours0.00318 days <br />0.0764 hours <br />4.546958e-4 weeks <br />1.046375e-4 months <br /> per licensee per year. This l

reduction includes the time required for reviewing instructions, searching existing data sources, gathering and maintaining the data needed and completing and reviewing the collection of information. The NRC is seeking public comments on the potential impact of the collection of information contained in the proposed rule and on the following issues:

1. Is the proposed collection of information necessary for the proper l

performance of the functions of the NRC, including whether the information will have practical utility?

2. Is the estimate of the burden accurate?
3. Is there a way to enhance the quality, utility, and clarity of the information to be collected?

! 4. How can the burden of the collection of information be minimized, r including the use of automated collection techniques?

Send comments on any aspect of this proposed collection of information, including suggestions for fcrther reducing the burden, to the Information and Records Management Branch (T-6 F33). U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by Internet electronic mail at BJSl@NRC. GOV; and

o to the Desk Officer, Office of Information and Regulatory Affairs, NE0B-10202.

(3150-0002), Office of Management and Budget. Washington, DC 20503.

Comments to OMB on the collections of information or on the above issues should be submitted by (insert date 30 days after publication in the Federal Register). Coments received after this date will be considered if it is i practical to do so, but assurance of consideration cannot be given to coments received after this date. ,

I Public Protection Notification )

j The NRC may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it displays a currently valid j OMB control number.

Regulatory Analysis I

A discussion of each of the changes proposed in this rule is provided l above in the supplementary information section. The proposed changes represent a potential cost savings for licensees because it is anticipated )

that fewer reviews and audits will be necessary. Most licensees include the safeguards contingency plan as part of the physical security program and one audit and review covers both. Information provided by licensees on the cost for conducting reviews and audits of the licensee emergency preparedness and i physical security programs varies, but is estimated to cost approximately 515,000 per annual raview and audit, for a total for both audits of $30,000 annually, Each element of the program would be audited at least once every 2

4 L

years. This would represent a potential maximum savings of 50 percent to licensees in the emergency preparedness and physical security program audit costs, or an estimated $30,000 per licensee every 2 years. The total cost l savings to the industry would be approximately $1.1M per year. Even if some l

elements of the programs were audited more frequently, the cost to the licensee will likely be less than auditing the entire program every year, i l Limited focused audits that address significant problems or changes will cost '

about $5,000 per year if they are needed. There is no additional cost '

, anticipated for collecting and analyzing program performance indicators since .

most licensees already do so in some fashion.

l Regulatory Flexibility Certification As required by the Regulatory Flexibility Act 0F 1980, 5 U.S.C. 605(b),

the Commission certifies that this proposed rule., if adopted, would not have a l significant economic impact on a substantial number of small entities This proposed rule would affect only licensees authorized to operate nuclear power i reactors. These licensees do not fall within the scope of the definition of "small entities" set forth in the Regulatory Flexibility Act, or the Small Business Size Standards set out in regulations issued by the Small Business l Administration Act, 13 CFR Part 121.

t Backfit Analysis

. The Comission has determined that the backfit rule.10 CFR 50.109, does not apply to this proposed amendment because this amendment would not impose i

O

. - . _ . --.. . - - ._ = - - - . _ . - - - - . - . - . - - . _ . -

r .

l new requirements on existing 10 CFR Part 50 licensees. The proposed changes would reduce the frequency with which licensees conduct independent reviews and audits of their emergency preparedness programs, safeguards contingency plans, and security programs. This action does not seek to impose any new or increased requirements in this area. It will be a decrease of burden on the licensee. No backfitting is intended or approved in connection with this proposed rule change. Therefore, a backfit analysis has not been prepared for i this amendment.

l List of Subjects j l

l 10 CFR Part 50 l Antitrust, Classified information, Criminal penalties, Fire protection.  !

Intergovernmental relations, Nuclear power plants and reactors, Radiation protection, Reactor siting criteria, Reporting and record keeping requirements.

10 CFR Part 73 Criminal penalties. Hazardous materials transportation, Export, Import, Nuclear materials, Nuclear power plants and reactors, Reporting and recordkeeping requirements Security measures.

For the reasons set out in the preamble and under the authority of the Atomic Energy Act of 1954, as amended the Energy Reorganization Act of 1974, i

as amended; and 5 U.S.C. 553: the NRC is proposing to adopt the following amendments to 10 CFR Part 50 and 73.

i I

.r  !

l .

i i

PART 50--DOMESTIC LICENSING OF PRODUCTION AND UTILIZATION FACILITIES

1. The authority citation for Part 50 continues to read as follows:

AUTHORITY: Secs. 102, 103, 104, 105, 161, 182, 183, 186, 189, 68 Stat.

t 936, 937, 938, 948, 953, 954, 955, 956, as amended, sec. 234, 83 Stat. 1244, l

as amended (42 U.S.C. 2132, 2133, 2134, 2135, 2201, 2232, 2233, 2236, 2239, 2282); secs. 201, as amended, 202, 206, 88 Stat. 1242, as amended. 1244, 1246 (42 U.S.C. 5841, 5842, 5846).

i

2. Section 50.54, is amended by revising paragraphs (p)(3) and (t) to i read as follows:

6 50.54 Conditions of license.

(p) * * *

(3) The licensee shall provide for the development, revision, implementation, and maintenance of its safeguards contingency plan by a review, as necessary, based on an assessment by the licensee against performance indicators, or as soon as reasonably practicable after a significant change occurs in personnel, procedures, equipment, or facilities, but no longer than 12 months after the change. The licensee shall ensure that all program elements are reviewed at least every 24 months by individuals

< independent of both security program management and personnel who have direct responsibility for implementation of the security program. The review must include a review and audit of safeguards contingency procedures and practices,  ;

l an audit of the security system testing and maintenance program, and a test of l  !

the safeguards systems along with commitments established for response by l

local law enforcement authorities. The results of the review and audit, along i

I

i .

i with reconmendations for improvements, must be documented, reported to the licensee's corporste and plant management, and kept available at the plant for inspection for a period of 3 years.

  • * * *
  • l l

(t) The licensee shall provide for the development, revision. -

implementation, and maintenance of its emergency preparedness program by a l review, as necessary, based on an assessment by the licensee against I performance indicators, or as soon as reasonably practicable after a L

significant change occurs in personnel, procedures, equipment, or facilities,

but no longer than 12 months after the change. The licensee shall ensure that all program elements are reviewed at least every 24 months by persons who have  !

l no direct responsibility for the implementation of the emergency preparedness  !

program. The review shall include an evaluation for adequacy of interfaces with State and local governments and of licensee drills, exercises, capabilities, and procedures. The results of the review, along with recommendations for improvements, shall be documented, reported to the licensee's corporate and plant management, and retained for a period of five years. The part of the review involving the evaluation for adequacy of l interface with State and local governments shall be available to the appropriate State and local governments.

l PART 73 -- PHYSICAL PROTECTION OF PLANTS AND MATERIALS I

3. The authority citation for Part 73 continues to read as follows

AUTHORITY: Secs. 53, 161, 68 Stat. 930, 948, as amended, sec. 147, 94 Stat. 780 (42 U.S.C. 2073, 2167, 2201); sec. 201, as amended. 204, 88 Stat.1242, as aroentled,1245, sec.1701,106 Stat. 2951. 2952, 2953 (42 U.S.C. 5841, 5844, 2297(f)).

Section 73.1 also issued under secs. 135, 141, Pub. L.97-425, 96 Stat. 2232, 2241 (42 U.S.C. 10155, 10161). Section 73.37(f) also issued under sec. 301, Pub. L.96-295, 94 Stat. 789 (42 U.S.C. 5841 note).

Section 73.57 is issued under sec. 606, Pub. L.99-399, 100 Stat. 876 (42 U.S.C. 2169). l i

4. Section 73.55 is amended by revising paragraph (g)(4) to read as l

follows.

1 73 55 Reauirements for ohysical orotection of licensed activities in i i

nuclear oower reactors aaainst radioloaical sabotaae.

! l I

(g) ***

l (4) The licensee shall review the security program, as necessary, based on an assessment by the licensee against performance indicators, or as soon as reasonably practicable after a significant change occurs in personnel, procedures, equipment, or facilities, but no longer than 12 months after the change. The licensee shall ensure that all program elements are reviewed at least every 24 months by individuals who have no direct responsibility for the implementation of the security program. The security program review must include an audit of security procedures and practices, an evaluation of the

i .

1 l

l l l i i

effectiveness of the physical protection system, an audit of the physical l l protection system testing and maintenance program, and an audit of comitments l l

l established for response by local law enforcement authorities. The results and recommendations of the security program review, management's findings on  !

l

, whether the security program is currently effective, and any actions taken as l

a result of recomendations from prior program reviews must be documented in a report to the licensee's plant manager and to corporate management at least one level higher than that having responsibility for the day-to-day plant

operation. These reports must be maintained in an auditable form, available for inspection, for a period of 3 years.

i

5. Appendix C to Part 73. Licensee Safeguards Contingency Plans, is amended by revising the first paragraph of the section titled " Audit and Review" to read as follows:

For nuclear facilities subject to the requirements of 6 73.46, the licensee shall provide for a review of the safeguards contingency plan at intervals not to exceed 12 months. For nuclear power reactor licensees i subject to the requirements of S 73.55, the licensee shall provide for a i

review of the safeguards contingency plan, as necessary, based on an assessment by the licensee against performance indicators, or as soon as I reasonably practicable after a significant change occurs in personnel, 4 procedures, equipment, or facilities, but no longer than 12 months after the change and shall ensure that all program elements are reviewed at least every 24 months. A licensee subject to either r.equirement shall ensure that the l

review of the safeguards contingency plan is by individuals independent of ,

both security program management and personnel who have direct responsibility i for implementation of the security program. The review must include an audit of safeguards contingency procedures and practices, and an audit of commitments established for response by local law enforcement authorities. 1 The licensee shall document the results and the recommendations of the i safeguards contingency plan review, management findings on whether the safeguards contingency plan is currently effective, and any actions taken as a result of recommendations from prior reviews in a report to the licensee's

! plant manager and to corporate management at least one level higher than that i having responsibility for the day-to-day plant operation. The report must be maintained in an auditable form, available for inspection for a period of 3 years.

l l Dated at Rockville. Maryland, this 08 day of July .1997.

For t e Nuclear Regulatory Commission k

'Hygh L. Thompson M0r.

t ng Executiv ir t r for Operations i

i d