ML23241A998
| ML23241A998 | |
| Person / Time | |
|---|---|
| Issue date: | 09/12/2024 |
| From: | NRC/NSIR/DSO/ISB |
| To: | |
| Shared Package | |
| ML22286A078 | List: |
| References | |
| Download: ML23241A998 (1) | |
Text
Enclosure Initial Questions Regarding Remote Use of Safeguards Information 1.
Paragraph 73.22(f)(3) of 10 CFR requires, in part, that Safeguards Information (SGI) transmitters and receivers implement processes that will provide high assurance that SGI is protected before and after the transmission.
a.
What administrative controls would be needed for the cloud-based system that will be used to transmit SGI and will these controls be captured in and supported by a licensees updated SGI plan or updated security plan?
b.
What technical controls would the system endpoints (laptops or communication devices) use to ensure that voice is the only possible usage of the system?
c.
Do NEI and industry intend to only use the end-point nodes (laptop or communications device) within the boundaries of licensed facilities? Are there other locations where the end-point nodes might be used? Where are the servers hosting the cloud-based system located and who manages them?
2.
Paragraph 73.22(g) of 10 CFR establishes requirements for processing of Safeguards Information on electronic systems. What is NEIs basis that encoding, encrypting, transmitting, receiving, and decrypting SGI voice communications are not forms of processing SGI?
3.
Would NEI or other industry entities intend to enter into a contract directly with a Federal Risk and Authorization Management Program (FedRAMP) authorized provider, or does NEI also intend to consider solution providers not listed but otherwise meet or exceed the controls required for FedRAMP approval?
4.
How would NEI ensure appropriate controls are in place for the protection of SGI with the solution provider?
ML23241A998 OFFICE OCIO/GEMSD/CSB
/CSOT NSIR/DSO/ISB NSIR/DSO OGC/GCRPS
/HLWFCNS/NLO NAME MMangefrida DParsons TInverso BYip for NSt.
DATE Mar 20, 2024 Mar 21, 2024 Mar 21, 2024 Apr 1, 2024 OFFICE NSIR NAME CErlanger DATE Sep 12, 2024