ML22354A014

American Centrifuge Operating, LLC, Submittal of Description of Change and Changed Pages Security Plans/Program

ML22354A014
Person / Time
Site:	07007003, 07007004
Issue date:	12/15/2022
From:	Karen Fitch American Centrifuge Operating
To:	John Lubinski Office of Nuclear Security and Incident Response, Document Control Desk, Office of Nuclear Material Safety and Safeguards
References
ACO 22-0088
Download: ML22354A014 (1)

Text

CUlllS~EXPT/SP~RlllNOFORN Security-Related Information - Withhold Under 10 CFR 2.390 Export Controlled Information

• .-... ***** Centrus..

• ; : ** * *

• Fueling the r... uh.ire

• * * *

• of Nvclear Power

December 15, 2022 ACO 22-0088

ATTN: Document Control Desk

John W. Lubinski, Director Office of Nuclear Material Safety and Safeguards U.S. Nuclear Regulatory Commission Washington, D.C. 20555-0001

Sabrina Atack, Director Division of Security Operations Office of Nuclear Security and Incident Response U.S. Nuclear Regulatory Commission Washington, D.C. 20555-0001

American Centrifuge Lead Cascade Facility and American Centrifuge Plant Docket Numbers 70-7003 and 70-7004; License Numbers SNM-7003 and SNM-2011

Submittal of Description of Change and Changed Pages for American Centrifuge Operating, LLC Security Plans/Program

INFORMATION TRANSMITTED HEREWITH IS PROTECTED FROM PUBLIC DISCLOSURE AS CONFIDENTIAL COMMERCIAL OR FINANCIAL INFORMATION AND/OR TRADE SECRETS PURSUANT TO 10 CFR 2.390 AND 9.l 7(a)(4)

AND INFORMATION TRANSMITTED HEREWITH IS PROTECTED FROM DISCLOSURE PURSUANT TO 10 CFR PART 810

Dear John Lubinski and Sabrina Atack:

In accordance with 10 Code of Federal Regulation s (CFR) 70.32(e), American Centrifuge Operating, LLC (ACO) hereby submits to the U.S. Nuclear Regulatory Commission (NRC) a description of change to ACO ' s Security Plans /Program as Enclosure 1 of this letter.

!J!f 55ZD

Document /matter transmitted herewith contains CUI ll SP-EX PT / SP-SRI ll NOFORN /l)S ;tP£ Security - Related Information - Withhold Under 10 CFR 2.390 Export Controlled Information (\\JN55 When separated from Enclosures 2 and 3, this cover letter and Enclosure 1 are uncontrolled.

American Centrifuge Operating, LLC jl)5IA 3930 U.S. Route 23 South - P.O. Box 628 Piketon, OH 45661 CUI// SP-EXPT / SP-SRI II NOFORN Security-Related Information - Withhold Under 10 CFR 2.390 Export Controlled Information

John Lubinski and Sabrina Atack December 15, 2022 ACO 22-0088, Page 2

Additionally, in accordance with 10 CFR 95.19(b), ACO hereby submits to the NRC changed pages for the following security plans/program:

• SP-3605-0043, American Centrifuge Operating, LLC (ACO) Classified Distributed Control System (DCS) Information System Security Plan (ISSP), as Enclosure 2, and

• SP-3605-0053, American Centrifuge Operating, LLC (ACO) Interconnection Security Agreement Between the Distributed Control System (DCS), and Classified Services Network (CSN), as Enclosure 3.

These* changes have been reviewed in accordance with 10 CFR 70.32 and 10 CFR 95.:*19 and have been determined no.t to decrease the effectiveness of the security plans/program and are non substantive changes.

Enclosures\\2 and 3 contain Security-Related Information; therefore, ACO requests these enclosures be withheld from public disclosure pursuant to 10 CFR 2.390( d)(l ). Additionally, Enclosures 2 and 3 have also been determined, in accordance with the guidance provided by the U.S. Department of Energy, to contain Export Controlled Information and must be protected from disclosure per the requirements of 10 CFR Part 810.

If you have any questions regarding this matter, please contact me at (740) 897-3859.

Sincerely,

~J'° A1V-,

Kelly L. Fitch Regulatory Manager

Enclosures:

As stated

cc (without enclosures, unless otherwise noted):

S. Bazian, NRC HQ (Enclosures)

Y. Faraz, NRC HQ (Enclosures)

A. Ford, DOE Idaho, Contracting Officer S. Harlow, DOE-NE J. Hutson, Contractor J. Lingard, DOE Idaho, Contract Specialist M. Mangefrida, HQ (Enclosures)

G. Nalabandian, HQ (Enclosures)

L. Pitts, NRC Region II (Enclosures)

J. Tobin, NRC HQ (Enclosures)

T. Vukovinsky, NRC Region II

Document/matter transmitted herewith contains CUI II SP-EXPT I SP-SRI II NOFORN Security-Related Information - Withhold Under 10 CFR 2.390

. Export Controlled Information When separated from Enclosures 2 and 3, this cover letter and Enclosure 1 are uncontrolled.

Enclosure 1 to ACO 22-0088

Description of Change to ACO's Security Plans/Program

Information contained within does not contain Export Controlled Information

Reviewer: # 103 8 Date: 12/14/2022 Enclosure 1 to ACO 22-0088 Description of Change to ACO's Security Plans/Program.

Documents ISA Modified Summary Approval Change Due to Update FCE/PCE Rev. Description/Reason for the Change Date to Change Required?

Numbers SSC?

FCE 22-0036 0

Title:

Revision to SP-3605-0053, American Centrifuge Operating, LLC (ACO) 11/17/2022 No SP-3605-0053 Sections 2, 3, No PCE 22-0064 0 Interconnection Agreement Between the Distributed Control System (DCS) and 4 and 6 Classified Services Network (CSN) and SP-3605-0043, American Centrifuge SP-3605-0043 Executive Operating, LLC (ACO) Classified Distributed Control System (DCS) Information Summary, TOC, Sections System Security Plan (ISSP) 1.0, 2.0, 3.0, 5.1, 5.2, 7.0, Figure 2; and Appendix A Description of Change: Revised SP-3605-0053 to update the Change Control page, Controls AC-2, AC-2(3),

add/remove references, incorporate a more detailed network diagram in Section 3, AC-2(7), AC-3(4), AC-5, update points of contacts, and perform editorial/grammatical corrections throughout, AC-10, AC-12(2), AC-12(3),

such as revise the classification markings. AU-2, AU-4(1), CM-14, CP-1, IR-2, IR-2(3), IR-9(2),

Revised SP-3605-0043 to update the Change Control page; add/remove references; RA-2, RA-2(1) and Sl-4 update Section 1.0 to include continuous monitoring information; update Figure 2 to correctly identify equipment, titles, and locations; add NIST SP 800-137 -

Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations discussion and ongoing monitoring activities; update the equipment listing to add encryptors and workstations; update points of contact; clarify Section 5.1 for incoming and outgoing transfer activities and folder names; clarify Section 7.0 and various security controls in Appendix A; and perform editorial/grammatical corrections throughout, such as revise the classification markings.

Reason for the Change: Clarify plan requirements.