ML21165A087

American Centrifuge Operating, LLC, Submittal of License Amendment Request Information Security Plan

ML21165A087
Person / Time
Site:	07007004
Issue date:	04/29/2021
From:	Karen Fitch American Centrifuge Operating
To:	Sabrina Atack Document Control Desk, Office of Nuclear Security and Incident Response
References
ACO 21-0020
Download: ML21165A087 (3)

Text

Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only Information

(t8ntrus

** * *

• Fueling the Future

• ** *

• of Nuclear Power April29,2021 ACO 21-0020 A T1N: Document Control Desk Ms. Sabrina D. Atack, Director Division of Security Operations Office of Nuclear Security and Incident Response U.S. Nuclear Regulatory Commis'sion Washington, D.C. 20555-0001 American Centrifuge Plant; Docket Number 70-7004; License Number SNM-2011 License Amendment Request for Centrus Energy Inc. Information Security Plan INFORMATION TRANSMITTED HEREWITH IS PROTECTED FROM PUBLIC DISCLOSURE AS SECURITY RELATED INFORMATION PURSUANT 10 CFR 2.390 (d)(l)

Dear Ms. Atack:

The purpose of this letter is to submit proposed changes to SP-HQ-0008, Centrus Energy Corp.

Headquarters Classified Administrative Thin Client System Security Control Security Plan, to the U.S. Nuclear Regulatory Commission (NRC) for review and approval. Newly proposed changes from the previously submitted plan are noted in tracked changes with revision bars in the right-hand margm.

The proposed changes to the security plan were determined not to decrease the effectiveness of the Security Programs/Plans in accordance with 10 Code ofFederal Regulations (CFR) 70.32; however, proposed changes to SP-HQ-0008 were determined to be a substantive change in accordance with 10 CFR 95.19 and requires NRC's prior review, approval, and accreditation.

On August 15, 2018 (Reference 1), the U.S. Department of Energy (DOE), acting as the Authorizing Official, provided the authority to operate SP-HQ-0008 (Revision 0) for a three-year period from the date of Reference 1. On September 11, 2018 (Reference 2), the NRC issued confirmation that Centrus Energy Corp. (Centrus) was fully authorized to resume processing classified information on its Headquarters' Administrative Thin Client system. This authorization is valid through August 14, 2021.

SDb-~A--

Document/matter transmitted contains f\JS ))~Dr?

Security-Related Information - Withhold Under 10 CFR 2.390 and Official Use Only Information When separated from enclosures, this cover letter is uncontrolled.

N5(~

American Centrifuge Operating, LLC 3930 U.S. Route 23 South - P.O. Box 628 Piketon, OH 45661

SecurJty-Related Information - Withhold Under 10 CFR 2.390.

Official Use Only Information Ms. Sabrina D. Atack April 29, 2021 ACO 21-0020, Page 2 Therefore, Centrus respectfully requests review and new accreditation be issued by August 14, 2021, to continue operation of the classified Administrative Thin Client system located at Bethesda, MD.

Additionally, upon approval of this security plan, ACO formally requests that NRC terminate former headquarters' cyber plans SP-HQ-0001, Information System Security Plan (ISSP) for Thin Client Operation Processing Classified Information at Protection Index = 2 (PI-2), and SP-HQ-0002, American Centrifuge HQ Classified Administrative Thin Client System Security Control Security Plan, are no longer needed and can be removed from the NRC Materials License SNM-2011, contained within condition L. provides a detailed description,justification, and Centrus' significance determination for the proposed changes. Enclosure 2 provides the proposed changes to security plan SP-HQ-0008.

Enclosures 1 and 2 contain Security-Related Information and, in accordance with the guidance provided by the DOE, contains Official Use Only information. Therefore, ACO requests these enclosures be withheld from public disclosure pursuant to 10 CFR 2.390(d)(l).

If you have any questions regarding this matter, please contact me at (740) 897-3859.

Sincerely,

~JOdliJ<

Kelly L. Fitch Regulatory Manager

Enclosures:

As stated

References:

1. DOE letter from M. McCune to J. Zimmerman (NRC) regarding Authorization of Centrus Energy Corp. Classified Cyber Network, dated August 15, 2018

2. NRC letter from J. Zimmerman to S.A. Toelle (Centrus) regarding Clarification Regarding U.S.

Nuclear Regulatory Commission Approval of Centrus Energy Corp. Headquarters Classified Administrative Thin Client System (Enterprise Project Identifier: C-2018-CYB-0000), dated September 11, 2018 Document/matter transmitted contains Security-Related Information - Withhold Under 10 CFR 2.390 and Official Use Only Information When separated from enclosures, this cover letter is uncontrolled;

Security-Related Information - Withhold Under 10 CFR 2.390 Official Use Only Information Mr. Sabrina D. Atack April 29, 2021 ACO 21-0020, Page 3 cc (without enclosures, unless otherwise noted):

K. Everly, NRC HQ (Enclosures)

Y. Paraz, NRC HQ S. Greene, DOE NE S. Harlow, DOE NE J. Hutson, DOE NE(Enclosures)

M. McCune, DOE NE N. Pitoniak, NRC Region II L. Pitts, NRC Region II (Enclosures)

R. K. Shears, DOE NE E. St. Clair, DOE NE C. Teal, NRC HQ R. Womack, NRC Region II T. Vukovinsky, NRC Region II Document/matter transmitted contains Security-Related Information - Withhold Under 10 CFR 2.390 and Official Use Only Information When separated from enclosures, this cover letter is uncontrolled.