ML21026A045

Letter: Announcement of Change in Authorizing Official Gle

ML21026A045
Person / Time
Site:	07007016, 07007033
Issue date:	01/27/2021
From:	Kevin Ramsey NRC/NMSS/DFM/FFLB
To:	Jenny P Global Laser Enrichment
Tiktinsky D
References
Download: ML21026A045 (3)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 January 27, 2021 Ms. Pat Jenny, Security Manager General Electric-Hitachi Global Laser Enrichment, LLC P.O. Box 780 3901 Castle Hayne Road Wilmington, NC 28402

SUBJECT:

CHANGE IN AUTHORIZING OFFICIAL FOR GLOBAL LASER ENRICHMENT, LLCS CLASSIFIED INFORMATION SYSTEMS/NETWORKS

Dear Ms. Jenny:

As you are aware, the U.S. Department of Energys Office of Nuclear Energy is no longer serving as the authorizing official (AO) for classified information systems/networks at your facility. The U.S. Nuclear Regulatory Commission (NRC) formally designated David Nelson, Chief Information Officer as the new AO as of January 1, 2021, which shall remain in effect until rescinded.

Jonathan Feibus, NRC Chief Information Security Officer (CISO), with assistance from NRC staff in the Cybersecurity Branch of the Office of the Chief Information Officer and the Information Security Branch of the Office of Nuclear Security and Incident Response, performed an assessment of the existing security controls, security plans, authorizations, inspection reports, and other supporting documentation for the classified information systems/networks at your facility. Based on this assessment, the NRC CISO recommended approval for an Interim Authority to Operate (IATO).

Based on the aforementioned assessment and the NRC CISO recommendation, the AO granted an IATO effective January 1, 2021, for your classified systems in the existing operating environment until October 18, 2021 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML18296A089). The AO stipulated that a reaccreditation effort shall take place prior to the expiration of the IATO, or in the event of identified major system changes, and that the IATO may remain in an ongoing authorization providing the following conditions are met:

• All documentation and artifacts are updated and reviewed on a regular basis or as conditions warrant;

• All inspection reports, continuous monitoring reports, or other pertinent and related documentation is provided to the AO and NRC CISO as they are produced or updated;

• Targeted checks of controls are to occur periodically, or as otherwise required, and results communicated back to the AO and NRC CISO;

• The AO and NRC CISO are provided with quarterly system updates;

• All system changes must be reported to the AO and NRC CISO prior to implementation for assessment and approval; and

P. Jenny 2

• All security-related events relative to the systems are to be reported to the AO and NRC CISO within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of discovery.

In accordance with Title 10 of the Code of Federal Regulations, Section 2.390 of the NRCs Agency Rules of Practice and Procedure, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room and ADAMS. ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html. The sensitive conditions in the license will be withheld from the public.

If you have any questions regarding this matter, please contact me or Mr. David Tiktinsky by telephone at 301-415-8740, or via email to David.Tiktinsky@nrc.gov.

Sincerely, Kevin M. Digitally signed by Kevin M. Ramsey Ramsey Date: 2021.01.28 08:15:46

-05'00' Kevin Ramsey, Acting Chief Fuel Facility Licensing Branch Division of Fuel Management Office of Nuclear Material Safety and Safeguards Docket No.: 70-7016 cc: gle@listmgr.nrc.gov

ML21026A045

• via email OFFICE DFM/FFLB* DFM/FFLB* DFM/FFLB

• NAME DTiktinsky ELee KRamsey DATE 1/ 26 /2021 1/26/2021 1/ 26 /2021