ML20198L315
| ML20198L315 | |
| Person / Time | |
|---|---|
| Site: | Portsmouth Gaseous Diffusion Plant |
| Issue date: | 12/28/1998 |
| From: | John Miller UNITED STATES ENRICHMENT CORP. (USEC) |
| To: | Goldberg F NRC, NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
| Shared Package | |
| ML20138M467 | List: |
| References | |
| GDP-98-0288, GDP-98-288, NUDOCS 9901040155 | |
| Download: ML20198L315 (9) | |
Text
.
USEC A Global Energy Company JAMES H. MILLER DIR: (301)664 3309 VicE PRESIDENT, PRODUCTION fax: (301)671-8279 December 28,1998 GDP 98-0288 Ms. Francine F. Goldberg Director, Planning and Resource Management Division Office of the ChiefInformation Officer Attention: Document Control Desk
' U.S. Nuclear Regulatory Commission Washington, D.C. 20555-0001 Portsmouth Gaseous Diffusion Plant (PORTS)
Docket No. 70-7002 Response to Nuclear Regulatory Commission Accreditation of Portsmouth Computer System INFORMATION TRANSMITTED IIEREWITH IS PROTECTED FROM PUBLIC DISCLOSURE AS CONFIDENTIAL COMMERCIAL OR FINANCIAL INFORMATION AND/OR TRADE SECRETS PURSUANT TO 10 CFR 2.790 AND 9.17(A)(4)
Dear Ms. Goldberg:
This submittal replaces Reference 1, submitted to the Nuclear Regulatory Commission (NRC) on December 18,1998. The United States Enrichment Corporation (USEC) requests that Reference 1 be withdrawn. Reference I contains proprietary information, and USEC neglected to request the information be protected as such.
The NRC provided accreditation of the Portsmouth Gaseous Diffusion Plant (PORTS) system described in Automated Infonnation Systems Security Plan Number Oll-U-C-M-96-E93-925-04-R5 in Reference 2. Reference 2 also forwarded several minor questions to 'USEC. USEC's response to these questions is provided in Enclosure 2. Any plan revisions discussed in Enclosure 2 will be kjj' made in the next revision of the computer security plan. USEC is also providing clarification for a statement made in Reference 2 regarding prior NRC approval of changes to the subject information system below.
E f'I k e 6[
i #
\\ y;Io byo f
, (T9 3
j 9901040155 981228
~
PDR ADOCK 070070023 g
)
C PDR t
qt 6903 Rockledge Drive, Bethesda, MD 20817-1818 Telephone 301-564-3200 Fax 301-564 3201 http://www.usec.com Omces in Livermore, CA Paducah. KY Portsmouth, OH Washington, DC
..- -. ~_
i i
' Ms. Francine F. Goldberg i
GDP 98-0288 December 28,1998, Page 2 l
Reference 2 states that the subject computer system is not to be moved or reconfigured in any way without appropriate updating by USEC and approval by the NRC of a revised computer security plan and the associated certification and accreditation documentation.. The process utilized at PORTS requires the Computer Security. Site Manager (CSSM) for the Automated Information Systems Security Plan Number OH-U-C-M-96-E93-925-04-R5 to evaluate each proposed computer system change (e.g., movement or reconfiguration of equipment, addition or revision of hardware or software, or a change in the computer system security plan) to the subject computer system to determine if the change constitutes a decrease in effectiveness of the subject computer system l
security plan. If the CSSM determines that the change constitutes a decrease in effectiveness of the subject computer system security plan, the change will be submitted for NRC approval prior to implementation. If the CSSM determines that the change does not constitute a decrease in effectiveness of the subject computer system security plan, the change will not be submitted for prior NRC approval but any associated revisions of the computer security plan will be promptly forwarded to the NRC after the change has been processed and approved by the CSSM. This process is similar to that utilized to evaluate changes to the PORTS physical security and classified matter security plans, and has been discussed with the NRC staff. contains confidential commercial or financial information or trade secrets that are exempt from public disclosure pursuant to Section 1314 of the Atomic Energy Act of 1954, as amended, and 10 CFR 2.790 and 9.17(a)(4). USEC requests that Enclosure 4 of this submittal be withheld from public disclosure. The enclosed affidavit provides the information required by 10 CFR 2.790(b) with respect to this request.
l New commitments contained in this submittal are listed in Enclosure 3. Please contact Mark Lombard at (301) 564-3248 if you have any questions concerning this information.
Sincer me L Miller e President, Production
Enclosures:
- 1. Affidavit of James H. Miller Supporting Request to Withhold From Public i
Disclosure Certain Portions of the Portsmouth Gaseous Diffusion Plant Letter GDP 98-0288
- 2. USEC Responses to NRC Questions
- 3. New Commitments Contained in This Submittal
- 4. Contingency Plan POEF-A-391, Rev. 3c cc: NRC Region Ill Ollice (w/o Enclosure 4) i NRC Resident Inspector - PGDP (w/o Enclosure 4)
NRC Resident Inspector - PORTS (w/o Enclosure 4)
L
Ms. Francine F. Goldberg GDP 98-0288 December 28,1998, Page 3 REFERENCES
- 1. Letter from Steven A. Toelle (USEC) to Francine F. Goldberg (NRC), " Response to Nuclear Regulatory Commission Accreditation of Portsmouth Computer System," GDP 98-0229,
- December 18,1998.
- 2. Letter from Francine F. Goldberg (NRC) to Steven A. Toelle (USEC), " Accreditation of a Portsmouth Computer System," September 28,1998.
l GDP 98-0288 Page 1 of 2 AFFIDAVIT OF JAMES II. MILLER.
SUPPORTING REQUEST TO WITIIIIOLD FROM PUBLIC DISCLOSURE CERTAIN PORTIONS OF TIIE PORTSMOUTII GASEOUS DIFFUSION PLANT LETTER GDP 98-0288 I, James H. Miller, Vice President, Production, United States Enrichment Corporation (USEC),
having been duly sworn, do hereby affirm and state:
1.
I have been authorized by USEC to (a) review the information owned by USEC which is referenced herein relating to the Portsmouth Gaseous Diffusion Plant and which USEC seeks to have withheld from public disclosure pursuant to section 147 of the Atomic Energy Act (AEA), as amended,42 U.S.C.
2167, and 10 CFR 2.790(a)(3),2.790(a)(4),2.790(d)(1) and 9.17(a)(4), and H
(b) apply for the withholding of such information from public disclosure by the Nuclear Regulatory Commission (NRC) on behalf of USEC.
2.
10 CF" 2.790(d)(1) states that correspondence and reports to or from the NRC containing information concerning an applicant's physical protection or material control and accou. '.ing program for special nuclear material not otherwise designated as Safeguards Information or classified as i
National Security Information or Restricted Data are deemed to be confidential commercial or fmancial information exempt from public disclosure. Accordingly, USEC requests that Enclosure 4 to GDP 98-0288, which describes USEC actions necessary to restore classified and material control and accountability computer systems to operation following a disaster, be withheld from public disclosure pursuant to section 147 of the AEA,42 U.S.C.
2167, and 10 CFR 2.790(a)(3),
2.790(d)(1) and 9.17(a)(4).
~. _ -
L GDP 98-0288
(
Page 2 of 2 I
3.
James II. Miller, having been duly sworn, hereby confirms that I am Vice President,
- Production, of the United States Enrichment Corporation (USEC), that I.am authorized by USEC
? to sign and file with the Nuclear Regulatory Commission the information contained in Enclosure 4 l
l-
. to GDP 98-0288, that I am familiar with the contents thereof, and that the statements made and matters set forth therein are true and correct to t best of my knowledge, information, and belief. -
1
\\
'ames H. Miller 1
l On this 28th day of December,1998, the individual signing above personally appeared before me, is known by me to be the person whose name is subsenbed to within the instrument, and L
acknowledged that he executed the same for the purposes therein contained.
In witness hereofI hereunto set my hand and official seal.
klO f_.
llOfL&
lurie Knisley, Notary Public //
State of Maryland, Montgomery County i
My commission expires March 1,2002 I
c, I
.i It U
GDP 98-0288 Page1of3 USEC Responses to NRC Ouestions NRC Ouestion 1 Page 4, section I.A = Shouldn't the word " Wireline" come between " Protected" and " Distribution System" in the last sentence, so as to agree with the wording on Page 11, section C.(1)?
USEC Response:
The wording on Page 11, Section C.(1) will.N revised to delete the word " Wireline" in the next revision of the subject security plan.
NRC Ouestion 2 Page 4, section I.A = The last three words of the last centence in the first paragraph are " approved encryption system." Please state who approved it and when?
USEC Response:
The words will be changed from " approved encryption system" to " approved encryption device" in the next revision of the subject security plan. DOE had approved the encryption devices for use while this security plan was under their regulatory jurisdiction.
NRC Ouestion 3 Page 7, section (6) = Is llalon 1301 still used as the fire extinguisher beneath the flooring?
USEC Response:
Halon 1301 is utilized as the fire extinguishing agent.
j
I l
1 i
l GDP 98-0288 Page 2 of 3 USEC Resnonses to NRC Ouestions 1
NRC Ouestion 4 Page 7, section (6) = Paragraph 3 references the X-100 Building and on page 8 says that for its diagram, "See Attachment 4." We found this sentence confusing as we were unable to find an X-100 building or vault room diagram in Attachment 4 before realizing that we should only be looking for X-100 within the barrier on the plant diagram. However, this diagram is so small that we could not identify which building was X-100 (the only clearly marked building was XT801, which had not been referenced in the text).
USEC Response: will be revised to show the location of X-100 more clearly in the next revision of the subject security plan. The vault type room is not identified on Attachment 4.
NRC Ouestian 5 Page 8, section F = In the first sentence, is "Section 11" the same as "Part II" just below it?
USEC Response:
Yes. The words "Section II" will be revised to state "Part II" in the next revision of the subject security plan.
NRC Ouestion 6 l
Page 9, section (4) = Paragraph 2 refers to a " computer security trained escort." What training has this individual received?
USEC Response:
These individuals have attended site training program MMUS-CST-93-9, " Computer Security Escort Training." The training program is available for review at the PORTS site.
l l
l
}
m u
_-. a ss 4
---a-GDP 98-0288 Page 3 of 3 USEC Responses to NRC Ouestions NRC Ouestion 7 Page 9, section (5) = Is the PFARS attached to the Configuration Change Notice or a separate document?
i USEC Response:
i The PFARS is not a part of the Configuration Change Notice.
NRC Ouestion 8 Page 10, paragraph I = Though we know what TCBs are, it would be helpful ifit was defined when first used in the document.
USEC Response:
TCBs will be defined when first used in the document in the next revision of the subject security plan.
NRC Ouestion 9 Page 12, paragraph 3 = NRC requests to be permitted to review a copy of" Contingency Plan
- POEF-A-391."
USEC Response:
Contingency Plan POEF-A-391, Rev. 3c, is provided in Enclosure 4 to this letter for information.
NRC Ouestion 10 Page 14, section F(3) = Please describe or give examples of" contact printers."
USEC Response:
Contact printers are mainframe, high-speed line printers such as the Dataproducts BP1500,-
Dataproducts B 300-2, and Digital Equipment LP-26. These printers are listed in Attachment 1 of the subject security plan.
i
[
s.
. GDP 98-0288 l
Page1of1
- New Commitments Contained in This Submittal The following changes will be made to Automated Information Systems Security Plan Number OH-U-C-M-96-E93-925-04-R5 in the next revision 'of the plan:
- 1. The wo' ding on' Page 11, Section C.(1) will be revised to delete the word " Wireline."
r 2.
The words on Page 4 in Section I.A will be changed from " approved encryption system" to
" approved encryption device."
- 3. Attachment 4 will be revised to show the location of X-100 more clearly.
- 4., The words "Section II" will be revised to state "Part II" on Page 8, Section F.
- 5. TCBs will be defined when first used in the plan.
r
.