View source for CNRO-2008-00030, Entergy Operations, Inc., Request for Approval to Use Privatel Telephone Security Devices to Transmit Safeguards Information to Authorized Personnel

{{Adams
| number = ML082810473
| issue date = 09/30/2008
| title = Entergy Operations, Inc., Request for Approval to Use Privatel Telephone Security Devices to Transmit Safeguards Information to Authorized Personnel
| author name = Ford B
| author affiliation = Entergy Nuclear Operations, Inc, Entergy Operations, Inc
| addressee name = 
| addressee affiliation = NRC/Document Control Desk, NRC/NRR
| docket = 05000003, 05000155, 05000247, 05000255, 05000271, 05000286, 05000293, 05000313, 05000368, 05000382, 05000416, 05000458
| license number = 
| contact person = 
| case reference number = CNRO-2008-00030
| document type = Letter type:CNRO
| page count = 33
}}

=Text=
{{#Wiki_filter:Entergy Operations, Inc.
Entergy Nuclear Operations, Inc.
Enter y                                                                             1340 Echelon Parkway Jackson, Mississippi 39213-8298 Tel 601-368-5516 Bryan S. Ford Senior Manager Nuclear Licensing CNRO-2008-00030 September 30, 2008 U.S. Nuclear Regulatory Commission Attn: Document Control Desk One White Flint North 11555 Rockville Pike Rockville, MD 20852-2738

==SUBJECT:==
Request for approval to use Privatel telephone security devices to transmit safeguards information to authorized personnel Arkansas Nuclear One, Units 1 and 2, Docket Nos. 50-313 & 50-368 Big Rock Point, Docket No. 50-155 Grand Gulf Nuclear Station, Docket No. 50-416 Indian Point Nuclear Generating Units 1, 2, and 3, Docket Nos. 50-003, 50-247 & 50-286 Palisades Nuclear Plant, Docket No. 50-255 Pilgrim Nuclear Power Station, Docket No. 50-293 River Bend Station, Docket No. 50-458 Vermont Yankee Nuclear Power Station, Docket No. 50-271 Waterford 3 Steam Electric Station, Docket No. 50-382

==Dear Sir or Madam:==

In accordance with 10 CFR 73.21(g)(3), Entergy Operations, Inc and Entergy Nuclear Operations, Inc (hereinafter Entergy) request Nuclear Regulatory Commission (NRC) approval for the above captioned facilities 1 to use Privatel model 960V, software version 7.10 telephone security devices for the purpose of establishing protected telecommunications and transmitting encoded Safeguards Information (SGI) between authorized individuals. The Privatel system would also be used to establish protected telecommunications systems with other SGI holders that have been authorized to use Privatel systems for purposes of transmitting Safeguards Information. These entities would include our corporate facilities, NRC, Nuclear Energy Institute (NEI), and other nuclear power plants that have received approval to use Privatel devices for this purpose.
The Privatel model 960V telephone security device, software version 7.10 conforms to Federal Information Processing Standard (FIPS)140-1 and is currently listed by the National Institute of Standards and Technology as a validated to FIPS-140-1 cryptographic module as of the January 4, 2008 update for the year 2000.
1 Our J. A. FitzPatrick plant was previously granted this same permission by NRC letter dated December 6, 2005 from Scott A. Morris to T. A. Sullivan (No TAC #).

CNRO-2008-00030 Page 2 of 3 Entergy has an information protection system in place that meets the requirements of 10 CFR 73.21(b) through (i). Prior to the first use of the Privatel security devices for SGI, written procedures will be implemented that describe where and when the Privatel devices can be used, how the identity and access authorization of the Privatel users will be verified, how to confirm the Privatel device is providing a secure conversation, and actions to be taken if the security or encoding of the conversation is suspected to be lost or compromised.
Pursuant to 10 CFR 73.21(g)(3), the transmission of encrypted material to other authorized SGI holders, who have received NRC approval to use Privatel model 960V, would be considered a protected telecommunications system. The transmission and dissemination of unencrypted SGI would remain subject to the provisions of 10 CFR 73.21(g)(1) and (2).
Entergy believes that the ability to discuss SGI over such protected and secured lines between the various resources that deal with security and emergency situations in both simulated and real scenarios will allow more effective responses to these types of situations.
The regulatory commitments made in this letter are summarized in Attachment 1.
Should you have any questions or require additional information, please contact Bryan Ford, Senior Manager Nuclear Safety and Licensing at (601) 368-5516.
Sincerely, JTH/LAE/lae

==Attachment:==
: 1. Regulatory Commitments Table

==Enclosure:==

Privatel 960v FIPS 140-1 Validation Certificate cc:      See next page

CNRO-2008-00030 Page 3 of 3 cc:   Mr. M. A. Balduzzi (WPO)    "
Mr. K. H. Bronson (PNPS)
Mr. T. A. Burke (ECH)
Mr. P. T. Dietrich (JAF)
Mr. J. R. Douet (GGNS)
Mr. J. S. Forbes (ECH)
Mr. J. T. Herron (ECH)
Mr. T. G. Mitchell (ANO)
Mr. M. Perito (RBS)
Mr. J. E. Pollock (IPEC)
Mr. C. J. Schwarz (PLP)
Mr. T. A. Sullivan (VY)
Mr. J. E. Venable (RBS)
Mr. K. T. Walsh (W-3)
Mr. J. L. Caldwell, NRC Regional Administrator, RIII Mr. E. E. Collins, NRC Regional Administrator, RIV Mr. S. J. Collins, NRC Regional Administrator, RI Mr. J. P. Boska, NRC Sr. Project Manager, IPEC Mr. J. N. Donohew, NRC Sr. Project Manager, GGNS/RBS Mr. J. Hall, NRC Project Manager, BRP Mr. N. Kalyanam, NRC Project Manager, W-3 Mr. J. S. Kim, NRC Project Manager, PNPS/VY Mr. M. L. Chawla, NRC Project Manager, PLP Mr. A. B. Wang, NRC Project Manager, ANO Mr. Paul Eddy NYS Department of Public Service 3 Empire State Plaza Albany, NY 12223 Mr. Paul D. Tonko President NYSERDA 17 Columbia Circle Albany, NY 12203-6399 Mr. David O'Brien Commissioner VT Department of Public Service 112 State Street, Drawer 20 Montpelier, VT 15620-2601 to CNRO-2008-00030 Page 1 of 1 Regulatory Commitments This table identifies actions discussed in this letter for which Entergy commits to perform.
Any other actions discussed in this submittal are described for the NRC's information and are not commitments.
TYPE                Scheduled Commitment                        One Time    Continuing  Completion Date Action      Compliance Implement procedures that describe where              X                  Prior to using and when the Privatel devices can be used,                               Privatel for Offsite how the identity and access authorization of                             SGI the Privatel users will be verified, how to                              Communications.
confirm the Privatel device is providing a secure conversation, and actions to be taken if the security or encoding of the conversation is suspected to be lost or compromised

FIPS 140-1 Validation Certificate I
The Nallonal Institute of Standards                                                                                                           The Communications Security and Technology of the United States                                                                                                          Establishment of the Government of America                                                                                                                                   of Canada
                                                                     %Frm Certificate No. 108 The National Institute of Standards and Technology, as the United States FIPS 140-1 Cryptographic Module Validation Authority; and the Communications Security Establishment, as the Canadian FIPS 140-1 Cryptographic Module Validation Authority; hereby validate the FIPS 140-1 testing results of the Cryptographic Module identified as:
PrivatelTM Model 960v, by L-3 Communication Systems In accordance with the Derived Test Requirements for FIPS 140-1, Security Requirements for CryptographicModules. FIPS 140-1 specifies the security requirements that are to be satisfied by a cryptographic module utilized within a security system protecting Sensitive But Unclassified Information (United States) or Designated Information (Canada) within computer and communications systems (including voice systems).
Products which use the above identified cryptographic module may be labeled as complying with the requirements of FIPS 140-1 so long as the product, throughout its life cycle, continues to use the validated version of the cryptographic module as specified in this certificate. The validation report contains additional details concerning test-results. No reliability test has been performed and no warranty of the products by both agencies is either expressed or implied.
This certificate includes details on the scope of conformance and validation authority signatures on the reverse.
                                                                            'MgA Certification Mark of NIST, which does not imply product endorsemont by NIST. tho U.S., or Coanodian Govemments.

FIPS 140-1 provides four increasing, qualitative levels of security: Level 1, Level 2, Level 3, and Level 4. These levels are intended to cover the wide range and potential applications and environments in which cryptographic modules may be employed. The security requirements cover eleven areas related to the secure design and implementation of a cryptographic module. The scope of conformance achieved by the cryptographic modules as tested in the product identified as:
Privatel"'Model 960v, by L-3 Communication Systems (Hardware version 960v, Software version 5.06; hardware)
CEAL, A CygnaCom Solutions Laboratory, and tested by the Cryptographic Module Testing accredited laboratory:                         NVLAP LAB CODE 200002-0 is as follows:
Cryptographic Module Design:                  Level 1                         Module Interfaces:                           Level 1 Roles and Services:                           Level 1                         Finite State Machine Model:                  Level 1 Physical Security:                            Level 1                         Software Security:                           Level 1 (Multi-chip standalone)
EMI / EMC:                                    Level 1                         Self Tests:                                  Level 1 Key Management:                               Level 1 Operating System Security Level N/A is met when used in the following configuration(s):                              N/A The following FIPS approved Cryptographic Algorithms are used:                      Triple DES (Cert. *20); SHA-1 (Cert.#33)
The Cryptographic module also contains the following non-FIPS approved algorithms:            Session Key Development Algorithm (SKDA)
End user queries concerning the non-FIPS approved algorithms may be directed to their respective Cryptographic Module Validation Authority.
Overall Level Achieved: 1 Signed on behalf of the Government of the United States                               Signed on behalf of the Government of Canada Signature:     *,k,.      D--
                          .,-    A                                                    Signature:
r~ofn4*   tI         -I.-  ~                                                          Dated:     S     J
                           '7 ov Chief, Computer Security Division                                                     Director, Information Protection Group National Institute of Standards and Technology                                        The Communications Security Establishment twt:

NUCLEAR                    (NON)-QUALITY RELATED            EN-LI-106            REV. 0 Enterg              MANAGEMENT M      A EMINFORMATION                                             USE                          (Typical)
ATTACHMENT 9.4                                                                                 NRC SUBMITTAL REvIEw Letter #: CNRO 2008-00030                                     Response Due: September 30, 2008

==Subject:==
Request for approval to use Privatel                 Date Issued for Review: Sept' 16, 2008 telephone security devices to transmit safeguards information to authorized personnel Correspondence Preparer I Phone #: L. A. England 433-5766 Section I          Letter Concurrence and Agreement to Perform Actions POSITION I NAME                               Action                                     Signature (concurrence, certification, etc.)          (sign,- interoffice memo, e-mail, or
_telecom)
Manager Security / C. L. Parker       Concurrence and Agreement to              e-mail dated 9/30/2008 10:09am Perform Actions ANO / Dale James                      Concurrence                               e-mail dated 9/30/2008 12:26pm COMMENTS Site concurrences via separate site LI-1 06 forms.
Section II        Correspondence Screening Does this letter contain commitments? If "yes," identify the commitments with due dates                     Yes      0 in the submittal and in Section III.                                                                        No       LI Does this letter contain any information or analyses of new safety issues performed at NRC                  Yes      LI request or to satisfy a regulatory requirement? If "yes," reflect requirement to update the                 No       0 UFSAR in Section III.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                      Yes      El etc.), if approved? If "yes," indicate in Section III an action for the responsible                          No       l]
department to determine the affected documents. (The Correspondence Preparer may indicate the specific documents requiring revision, if known or may initiate an action for review.)
Does this letter contain information certified accurate? If "yes," identify the information and             Yes      [1 document certification in an attachment. (Attachment 9.5 may be used.)                                       No       l]
Section III       Action Items Required Actions                                                           Due Date              Responsible Dept.
Note: Actions needed upon approvalshould be capturedin the appropriateaction tracking system Implement procedures that describe where and when the Privatel             Prior to use on       Corporate Security devices can be used, how the identity and access authorization of          site the Privatel users will be verified, how to confirm the Privatel z~$r'   6/XF6

NUCLEAR                 (NON)-QUALiTY RELATED EN-LI-1 06        REV. 0 EnteW            MANAGEMENT MANUAL                     INFORMATION USE            (Typical) device is providing a secure conversation, and actions to be taken if the security or encoding of the conversation is suspected to be lost or compromised Section IV        Final Document Signoff for Submittal Correspondence Preparer             L.A. England 9/30/2008 Final Submittal Review (optional)
Responsible Department Head         B. S. Ford 9/30/2008

. FW: Privatel secure phones concurrence                                                                     Page I of 3 ENGLAND, LESLEY A From:       PARKER, CLAUDIA Sent:      Tuesday, September 30, 2008 10:09 AM To:         ENGLAND, LESLEY A

==Subject:==
RE: Privatel secure phones concurrence yes thanks From: ENGLAND, LESLEY A Sent: Tue 9/30/2008 10:03 AM To: PARKER, CLAUDIA

==Subject:==
FW: Privatel secure phones concurrence Do I have your concurrence to transmit the attached Privatel letter CNRO 2008-00030 and produce the required implementing procedures for the fleet?
Les England Entergy Services, Inc.
1340 Echelon Parkway Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone lenglanOenterqy.com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination,distribution, or copying of this e-mail and any attachments thereto is strictly prohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any e-mail and any printout thereof.
  <<ENGLAND, LESLEY A.vcf>>
From: ENGLAND, LESLEY A Sent: Tuesday, September 16, 2008 3:19 PM 9/30/2008

. FW: Privatel secure phones concurrence                                                                     Page 2 of 3 To: JAMES, DALE E; Lahti, Laurie A.; LARSON, MICHAEL J; LORFING, DAVID N; Lynch, Joseph R; Manhai, David; MURILLO, ROBERT J; Walpole, Robert W Cc: Dorman, Eugene; ANDERS, SCOTT L; Burke, David (Pilgrim); Frato, Martin; Gagnon, Daniel W; Huttie Jr, Albert; JAMES, ANDRE' S; Laplante, Jonathan; Marcussen, Fred; PARKER, CLAUDIA; Rabideau, Brian R.; Ryan, Patrick; Stone, James P; Sullivan, Gregory; Vanhom, Lawrence; ENGLAND, LESLEY A; Ford, Bryan; Faison, Charlene D; 'Bray, Luann E. [lebray@nppd.com]'; Devincentis, Jim; Dotson, Barbara E.; FOUNTAIN, WILLIAM J; Gatslick, Mary; JACKSON, RITA R; MOSHER, NATALIE B; Prussman, Stephen G; SCOTT, GREGORY C

==Subject:==
RE: Privatel secure phones Importance: High Via my e-mail dated August 25, 2008 I requested initial site review of a draft letter that would request NRC permission for-each site to be able to obtain and use the Privatel Model 960v telephone encryption system. Comments received from that review have been incorporated and the attached letter is being sent to you for formal site concurrence per EN-LI-106. In this instance one letter will be sentfrom headquarters for the fleet. JAF is excluded because they already have this permission from NRC. Please route this letter at your site for concurrence and forward to me a scan of the executed LI-1 06 form. I have dated the letter for September 30 submittal but will accelerate that date depending on early receipt of site concurrence.
May I have your site concurrence at your earliest convenience?
  <<Privatel_FIPS_140_1 .pdf>> <<CNRO2008 Privatel&#xfd;(final).doc>> <<2008 Submittal Review Form CNRO 2008-00030 Privatel.doc>>
Les England Entergy Services, Inc.
1340 Echelon Parkway Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone len.plan@enterpy.com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any disseminalion,distribution, or copying of this e-mail and any attachments thereto is strictly prohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any-e-mail and any printout thereof.
  <<ENGLAND, LESLEY A.vcf>>
9/30/2008

FW: Privatel secure phones concurrence                                                                     Page 3 of 3
                          /
From: ENGLAND, LESLEY A Sent: Monday, August 25, 2008 11:01 AM To: Faison, Charlene D; Ford, Bryan; JAMES, DALE E; Lahti, Laurie A.; LARSON, MICHAEL J; LORFING, DAVID N; Lynch, Joseph R; Mannai, David; MURILLO, ROBERT J; Walpole, Robert W Cc: Costedio, James; Dorman, Eugene; ANDERS, SCOTT L; Burke, David (Pilgrim); Frato, Martin; Gagnon, Daniel W; Huttie Jr, Albert; JAMES, ANDRE' S; Laplante, Jonathan; Marcussen, Fred; PARKER, CLAUDIA; Rabideau, Brian R.; Ryan, Patrick; Stone, James P; Sullivan, Gregory; Vanhorn, Lawrence

==Subject:==
Privatel secure phones Importance: High Attached is a draft letter requesting NRC permission to employ Privatel phone encryption devices at all of our sites. JAF currently has this permission and their letter to NRC was the basis for this request. Before I formally request site concurrence I'm providing this copy for site comments. I think the letter is self explanatory. Claudia Parker will craft a fleet procedure to govern the use of the equipment. Site security will be responsible for procedural compliance. I plan to tender this letter to NRC as soon as reasonably possible. I understand the each site would budget for and procure their own devices (only the device described in the letter would be authorized). May I have your comments this week?
 << File: CNRO2008 Privatel.doc >>
Les England Entergy Services, Inc.
1340 Echelon Parkway Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone lenglanoenterqy.com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination,distribution, or copying of this e-mail and any attachments thereto is strictly prohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any e-mail and any printout thereof.
 << File: ENGLAND, LESLEY A.vcf >>
9/30/2008

ENLAND                       V"LYA  .77><7                                                         7      7 From:       JAMES, DALE E Sent:       Tuesday, September 30, 2008 12:26 PM To:         ENGLAND, LESLEY A Cc:         MOSHER, NATALIE B

==Subject:==
RE: Pnvatel secure phones Les You have my concurrence.
Dale S-----Original Message-----
From: ENGLAND, LESLEY A Sent: Tuesday, September 30, 2008 8:21 AM To: MOSHER, NATALIE B; MURILLO, ROBERT J; JAMES, DALE E; SCOTT, GREGORY C

==Subject:==
FW: Privatel secure phones NEED ANO AND W3 CONCURRENCES TODAY.
Les England Entergy Services, Inc.
1340 Echelon Parkway Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone lenplancaenterpy.com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination,distribution, or copying of this e-mail and any attachments thereto is strictly prohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any e-mail and any printout thereof.
         << File: ENGLAND, LESLEY A.vcf>>
From: ENGLAND, LESLEY A Sent: Tuesday, September 16, 2008 3:19 PM To: JAMES, DALE E; Lahti, Laurie A.; LARSON, MICHAEL J; LORFING, DAVID N; Lynch, Joseph R; Mannai, David; MURILLO, ROBERT J; Walpole, Robert W Cc: Dorman, Eugene; ANDERS, SCOTT L; Burke, David (Pilgrim); Frato, Martin; Gagnon, Daniel W; Huttie Jr, Albert; JAMES, ANDRE' S; Laplante, Jonathan; Marcussen, Fred; PARKER, CLAUDIA; Rabideau, Brian R.; Ryan, Patrick; Stone, James P; Sullivan, Gregory; Vanhorn, Lawrence; ENGLAND, LESLEY A; Ford, Bryan; Faison, Charlene D; 'Bray, Luann E. [lebray@nppd.com]'; Devincentis, Jim; Dotson, Barbara E.; FOUNTAIN, WILLIAM J; Gatslick, Mary; JACKSON, RITA R; MOSHER, NATALIE B; Prussman, Stephen G; SCOTT, GREGORY C

==Subject:==
RE: Privatel secure phones Importance: High

Via my e-mail dated August 25, 2008 1requested initial site review of a draft letter that would request NRC permission for each site to be able to obtain and use the Privatel Model 960v telephone encryption system. Comments received from that review have been incorporated and the attached letter is being sent to you for formal site concurrence per EN-LI-106. In this instance one letter will be sent from headquarters for the fleet. JAF is excluded because they already have this permission from NRC. Please route this letter at your site for concurrence and forward to me a scan of the executed LI-106 form. I have dated the letter for September 30 submittal but will accelerate that date depending on early receipt of site concurrence.
May I have your site concurrence at your earliest convenience?
  << File: PrivatelFIPS_140_l .pdf>> << File: CNRO2008 Privatel (final).doc
>> << File: 2008 Submittal Review Form CNRO 2008-00030 Privatel.doc >>
Les England Entergy Services, Inc.
1340 Echelon Parkway Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone lenqlan(centerqy.com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. Ifyou are not the intended recipient of this e-mail, you are hereby notified that any dissemination,distribution, or copying of this e-mail and any attachments thereto is strictly prohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any e-mail and any printout thereof.
  << File: ENGLAND, LESLEY A.vcf >>
From: ENGLAND, LESLEY A Sent: Monday, August 25, 2008 11:01 AM To: Faison, Charlene D; Ford, Bryan; JAMES, DALE E; Lahti, Laurie A.; LARSON, MICHAEL J; LORFING, DAVID N; Lynch, Joseph R; Mannai, David; MURILLO, ROBERT J; Walpole, Robert W Cc: Costedio, James; Dorman, Eugene; ANDERS, SCOTT L; Burke, David (Pilgrim); Frato, Martin; Gagnon, Daniel W; Huttie Jr, Albert; JAMES, ANDRE' S; Laplante, Jonathan; Marcussen, Fred; PARKER, CLAUDIA; Rabideau, Brian R.; Ryan, Patrick; Stone, James P; Sullivan, Gregory; Vanhom, Lawrence

==Subject:==
Privatel secure phones Importance: High Attached is a draft letter requesting NRC permission to employ Pnvatel phone encryption devices at all of our sites. JAF currently has this permission and their letter to NRC was the basis for this request. Before I formally request site

concurrence I'm providing this copy for site comments. I think the letter is self explanatory. Claudia Parker will craft a fleet procedure to govern the use of the equipment. Site security will be responsible for procedural compliance. I plan to tender this letter to NRC as soon as reasonably possible. I understand the each site would budget for and procure their own devices (only the device described in the letter would be authorized). May I have your comments this week?
 << File: CNRO2008 Privatel.doc >>
Les England Entergy Services, Inc.
1340 Echelon Parkway Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone lenalanCcenterav.com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination,distribution, or copying of this e-mail and any attachments thereto is strictly prohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any e-mail and any printout thereof.
 << File: ENGLAND, LESLEY A.vcf >>

    - I'                   NUCLEAR                  (NON)-QUALiTY  RELATED             EN-LI-106           REV. 0 Entergy           MANAGEMENT MANUAL                       INFORMATION USE                          (Typical)
ATTACHMENT 9.4                                                                                NRC SUBMITTAL     REVIEW Letter #: CNRO 2008-00030                                     Response Due: September 30, 2008

==Subject:==
Request for approval to use Privatel                :Date Issued for Review:. Sept. 16, 2008 telephone security devices to transmit Safeguards informationrto authorized                                        .
personnel Correspondence Preparer I Phone #: L. A. England 433-5766 Section I          Letter Concurrence and Aoreement to Perform Actions POSITION / NAME                            Action                                      Signature (concurrence, certification, etc.)          (sign, interoffice memo, e-mail, or telecom)
DIRECTOR, NSA - GGNS                  CONCURRENCE                               M. KRUPA BY EMAIL CONCUR.
9-17-2008 MANAGER, SERCURITY - GGNS             CONCURRENCE                               L. VANHORN BE EMAIL CONCUR 9-17-2008 COMMENTS C. L. Parker is responsible for corporate procedures for Puivatel use.
Section II         Correspondence Screening Does this letter contain commitments? If "yes," identify the commitments with due dates                    Yes       0 in the submittal and in Section III.                                                                       No        El Does this letter contain any information or analyses of new safety issues performed at NRC                 Yes      fl request or to satisfy a regulatory requirement? If "yes," reflect requirement to update the                No        [
UFSAR in Section III.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                     Yes       El etc.), if approved? If "yes," indicate in Section III an action for the responsible                        No        [
department to determine the affected documents. (The Correspondence Preparer may indicate the specific documents requiring revision, if known or may initiate an action for review.)
Does this letter contain information certified accurate? If "yes," identify the information and            Yes      fl document certification in an attachment. (Attachment 9.5 may be used.)                                     No        [
Section III       Action Items Required Actions                                                           Due Date             Responsible Dept.'
Note: Actions needed upon approvalshould be captured in the appropriateaction tracking system Implement procedures that describe where and when the Privatel             Prior to use on      Corporate Security devices can be used, how the identity and access authorization of          site the Privatel users will be verified, how to confirm the Privatel device is providing a secure conversation, and actions to be taken if the security or encoding of the conversation is suspected to be

LARSON, MICHAEL J From:                       KRUPA, MICHAEL A Sent:                       Wednesday, September 17, 2008 8:34 AM To:                         LARSON, MICHAEL J; Vanhom, Lawrence Cc:                         JACKSON, RITA R

==Subject:==
RE: Privatel secure phones - CONCURRENCE I concur.
Does this device include Fax?
From: LARSON, MICHAEL J Sent: Tuesday, September 16, 2008 4:57 PM To: KRUPA, MICHAEL A; Vanhorn, Lawrence Cc: JACKSON, RITA R

==Subject:==
FW: Privatel secure phones - CONCURRENCE Importance: High
  << File: 2008 Submittal Review Form CNRO 2008-00030 Privateldoc >>
I NEED CONCURRENCE WITH ATTACHED LETTER.
THANKS MICHAEL LARSON From: ENGLAND, LESLEY A Sent: Tuesday, September 16, 2008 3:19 PM To: JAMES, DALE E; Lahti, Laurie A.; LARSON, MICHAEL J; LORFING, DAVID N; Lynch, Joseph R; Mannai, David; MURILLO, ROBERT J; Walpole, Robert W Cc: Dorman, Eugene; ANDERS, SCOTT L; Burke, David (Pilgrim); Frato, Martin; Gagnon, Daniel W; Huttie Jr, Albert; JAMES, ANDRE' S; Laplante, Jonathan; Marcussen, Fred; PARKER, CLAUDIA; Rabideau, Brian R.; Ryan, Patrick; Stone, James P; Sullivan, Gregory; Vanhorn, Lawrence; ENGLAND, LESLEY A; Ford, Bryan; Faison, Charlene D; Bray, Luann E.
[lebray@nppd.com]; Devincentis, Jim; Dotson, Barbara E.; FOUNTAIN, WILLIAM J; Gatslick, Mary; JACKSON, RITA R; MOSHER, NATALIE B; Prussman, Stephen G; SCOTT, GREGORY C

==Subject:==
RE: Privatel secure phones Importance: High Via my e-mail dated August 25, 2008 I requested initial site review of a draft letter that would request NRC permission for each site to be able to obtain and use the Privatel Model 960v telephone encryption system.
Comments received from that review have been incorporated and the attached letter is being sent to you for formal site concurrence per EN-LI-106. In this instance one letter will be sent from headquarters for the fleet.
JAF is excluded because they already have this permission from NRC. Please route this letter at your site for concurrence and forward to me a scan of the executed LI-1 06 form. I have dated the letter for September 30 submittal but will accelerate that date depending on early receipt of site concurrence.
May I have your site concurrence at your earliest convenience?
 << File: PrivatelFIPS_140_l.pdf>> << Fle: CNRO2008 Privatel (firal).doc >>
Les England Entergy Services, Inc.
1340 Echelon Parkway

Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone lenglant.enterav. com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. Ifyou are not the intended recipient of this e-mail, you are hereby notified that any disseminationdistribution, or copying of this e-mail and any attachments thereto is strictly Orohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any e-mail and any printout thereof.
 <<File: ENGLAND, LESLEY Avcf>>
From: ENGLAND, LESLEY A Sent: Monday, August 25, 2008 11:01 AM To: Faison, Charlene D; Ford, Bryan; JAMES, DALE E; Lahti, Laurie A.; LARSON, MICHAEL J; LORFING, DAVID N; Lynch, Joseph R; Mannai, David; MURILLO, ROBERT 3; Walpole, Robert W Cc: Costedio, James; Dorman, Eugene; ANDERS, SCOTT L; Burke, David (Pilgrim); Frato, Martin; Gagnon, Daniel W; Huttie Jr, Albert; JAMES, ANDRE S; Laplante, Jonathan; Marcussen, Fred; PARKER, CLAUDIA; Rabideau, Brian R.; Ryan, Patrick; Stone, James P; Sullivan, Gregory; Vanhorn, Lawrence

==Subject:==
. Privatel secure phones Importance: High Attached is a draft letter requesting NRC permission to employ Privatel phone encryption devices at all of our sites. JAF currently has this permission and their letter to NRC was the basis for this request. Before I formally request site concurrence I'm providing this copy for site comments. I think the letter is self explanatory. Claudia Parker will craft a fleet procedure to govern the use of the equipment. Site security will be responsible for procedural compliance. I plan to tender this letter to NRC as soon as reasonably possible. I understand the each site would budget for and procure their own devices (only the device described in the letter would be authorized). May I have your comments this week?
 << File: CNRO2008 Privatel.doc >>
Les England Entergy Services, Inc.
1340 Echelon Parkway Jackson, MS 39213 8-433-5766 Internal (601) 368-5766 Office (601) 368-5816 FAX (601) 927-2875 Personal Cell Phone Lenalan(aenteray.com This e-mail and any attachments thereto are intended only for the use by the addressee(s) named herein and contain proprietary and confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any disseminationdistribution, or copying of this e-mail and any attachments thereto is strictly prohibited. If you have received this e-mail in error, please notify me and permanently delete the original and any copy of any e-mail and any printout thereof.
 <<File: ENGLAND, LESLEY Avcf>>
2

LARSON, MICHAEL J From:                  Vanhorn, Lawrence Sent:                  Wednesday, September 17, 2008 8:51 AM To:                    LARSON, MICHAEL J

==Subject:==
Re: CONCURRENCE NEEDED I concur Lawrence J. Van Horn Manager, Security Grand Gulf Nuclear Station 601-437-2143 (Office) 601-630-5522 (Cell)
Original
         -----  Message -----
From: LARSON, MICHAEL J To: KRUPA, MICHAEL A; Vanhorn, Lawrence Sent: Wed Sep 17 08:09:55 2008

==Subject:==
CONCURRENCE NEEDED I sent you a letter   in your email for concurrence       - can you please concur via email - need to get the letter   to corporate.
Thanks MIKE LARSON 1

ATrTACHMENT 9.4                                                                                             NRC SUBMn'rAL REVIEW Letter #- CNRO 2008-00030                                          Response Due: September 30, 2008

==Subject:==
Request for approval to use Privatel                      Date Issued for Review: Sept. 16, 2008 telephone security devices to transmit safeguards information to authorized personnel Correspondence Preparer / Phone #: L. A. England 433-5766 Section I         Letter Concurrence and Aare.ment             to Perform Actions
 .  .   .. I... Lette......... . .. .. . ..   .. .            ..         frm
                                                                   . ................. A tio n POSITION I NAME.                               Action                                               Signature (concurrence, certification, etc.)                  (sign, interoffice memo, e-mail, or telecom)
Manager Security / Andre James            Concur                                              See email Manager Licensing I David Lorfing         Concur                                                            "fj//      '
COMMENTS C. L Parker is responsible for corporate procedures for Privatel use.
Section II        Correspondence Screening Does this letter contain commitments? If "yes," identify the commitments with due dates                                  Yes      0 in the submittal and in Section III.                                                                                     No       C Does this letter contain any information or analyses of new safety issues performed at NRC                               Yes      [1 request or to satisfy a regulatory requirement? If "yes," reflect requirement to update the                              No       0 UFSAR In Section III.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                                   Yes etc.), if approved? If "yes," indicate in Section III an action for the responsible                                      No       0 department to determine the affected documents. (The Correspondence Preparer may indicate the specific documents requiring revision, if known or may Initiate an action for review.)
Does this letter contain information certified accurate? If "yes," identify the information and                          Yes document certification in an attachment. (Attachment 9.5 may be used.)                                                   No       0 Section III       Action Items Required Actions                                                                       j      Date           Responsible Dept.
Note: Actions needed upon approval should be captured in the                           D

LORFING, DAVID N.
From:                   JAMES, ANDRE' S Sent:                   Wednesday, September 24, 2008 1:57 PM To:                     LORFING, DAVID N

==Subject:==
Re: Privatel secure phones I agree with the submittal and concur with the commitment.
Sent from my BlackBerry Wireless Handheld Original Message -----
From: LORFING, DAVID N To: JAMES, ANDRE' S Sent: Wed Sep 24 13:33:14 2008

==Subject:==
FW: Privatel secure phones Andre Please let me know if     you agree with this submittal and the commitment.
David Original
         -----   Message -----
From: LORFING, DAVID N Sent: Saturday, September 20, 2008 12:22 PM To: ROBERTS, JERRY C; JAMES, ANDRE' S

==Subject:==
FW: Privatel secure phones Importance: High Jerry and Andre Attached is a draft letter       (first    WORD doc attached below) to the NRC concerning Privatel Secure Phones. Once approved by NRC we will be able to implement, should we choose to do so. Please review and provide your concurrence (via email) with the submittal including the commitment stated in the letter.           I will forward the concurrence to corporate. Your concurrence is request at your earliest convenience to support a submittal prior to 9/30.
David Lorfing Original
         -----   Message -----
From: ENGLAND, LESLEY A Sent: Tuesday, September 16, 2008 3:19 PM To: JAMES, DALE E; Lahti, Laurie A.; LARSON, MICHAEL J; LORFING, DAVID N; Lynch, Joseph R; Mannai, David; MURILLO, ROBERT J; Walpole, Robert W Cc: Dorman, Eugene; ANDERS, SCOTT L; Burke, David (Pilgrim); Frato, Martin; Gagnon, Daniel W; Huttie Jr, Albert; JAMES, ANDRE' S; Laplante, Jonathan; Marcussen, Fred; PARKER, CLAUDIA; Rabideau, Brian R.; Ryan, Patrick; Stone, James P; Sullivan, Gregory; Vanhorn, Lawrence; ENGLAND, LESLEY A; Ford, Bryan; Faison, Charlene D; Bray, Luann E.
[lebray@nppd.com]; Devincentis, Jim; Dotson, Barbara E.; FOUNTAIN, WILLIAM J; Gatslick, Mary; JACKSON, RITA R; MOSHER, NATALIE B; Prussman, Stephen G; SCOTT, GREGORY C

==Subject:==
RE: Privatel secure phones Importance: High Via my e-mail dated August 25, 2008 I requested initial           site review of a draft letter   that would request NRC permission for each site           to be able to obtain and use the Private! Model 960v telephone encryption system. Comments received from that review have been incorporated and the attached letter         is being sent to you for formal site  concurrence per EN-LI-106. In this instance one letter           will be sent from headquarters for the fleet. JAF is excluded because they already have this permission from NRC. Please route this letter at your site    for concurrence and forward to me a scan of the executed LI-106 form. I have 1

E               [MNUCLEAR eigyjMANUAL MANAGEMUENT___pi    I     (NoN)-QuAurY RELATE N-OMEntO USE INFORMATION            ((    EN-LI-106 (Typical)J REV. 0 ATTACHMENT     9.4                                                                       NRC SUBMIrrAL REVIEW Letter #: CNRO 2008-00030                                   Response Due: September 30, 2008

==Subject:==
Request for approval to use Privatel               Date Issued for Review: Sept. 16, 2008 telephone security devices to transmit safeguards information to authorized personnel Correspondence Preparer / Phone #: L. A. England 433-5766 Section I         Letter Concurront~e and Aarnnmant to Pedomi Aetione POSITION I NAME                             Action                                  Signature :-
                                       *(concrrencecertiicatonetc.)               Sign internofficemeimoe-mail1, or (sign,
________________________-___telecom) .                                 .
COMMENTS C. L. Parker is responsible for corporate procedures for Privatel use.
Section II        Correspondence Screening
* Does this letter contain commitments? If "yes," identify the commitments with due dates                 Yes       [
in the submittal and in Section II1.                                                                    No        El Does this letter contain any information or analyses of new safety issues performed at NRC              Yes       0]
request or to satisfy a regulatory requirement? If "yes," reflect requirement to update the             No        [
UFSAR in Section III.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                  Yes       EL etc.), if approved? If "yes," indicate in Section III an action for the responsible                     No        I department to determine the affected documents. (The Correspondence Preparer may indicate the specific documents requiring revision, If known or may initiate an action for review.)
Does this letter contain information certified accurate? If "yes," identify the information and         Yes       LI document certification in an attachment. (Attachment 9.5 may be used.)                                  No        [
Section III       Action Items Required Actions Note: Actions needed upon approval should be captured in the Due Date I Responsible Dept          '

       *Enteigy        [  NUCLEAR MANAGEMENT MANUAL (NON)-QUALlY  RELATED INFORMATION USE EN-LI-106 (Typical)
REV. 0 appropfiate action tracking system Implement procedures that describe where and when the Privatel        Prior to use on  Corporate Security devices can be used, how the identity and access authorization of      site the Privatel users will be verified, how to confirm the Privatel device is providing a secure conversation, and actions to be taken if the security or encoding of the conversation is suspected to be lost or compromised Section IV        Final Document Signoff for Submittal Correspondence Preparer                               L.A. England Final Submittal Review (optional)
Greg Scott, W3 Licensing Specialist                                                    7 Scott Anders, W3 Security Manager                                                    93o Robert Murillo, W3 Licensing Manager-;7 Responsible Department Head                           B. S. Ford

Eth                 NUCLEAR MANAGEMENT (NON)-QUAUTY RELA1E                EN-U-106            REV.0 MANUAL                     IWORMATO      UsE                         (Typical)
ATTACHMENT 9.4                                                                                NRC SUBMITTAL REVtEW Letter #: CNRO 2008-00030                                    Response Due: September 30, 2008

==Subject:==
Request for approval to use Privatel                Date Issued for Review: Sept.,                 2008 telephone security devices to transmit safeguards information to authorized personnel Correspondence Preparer I Phone #: L. A. England 433-5766 Section I           Letter Concurrence and Aareement to Perform Actions POSITION/ NAME                             Action:                                     Signature
 .                                      (concurrence, certification, etc.)          (sign. interoffice memo, e-mail, or I.telecom)
S Prussman / R Walpole               concurrence                           .i*k-               7-,
0 Gagnon - manager Security          Concurrence                               L., Q~~l                       fi& NPMJ AVitale -Plant Manager               Info~rmation T Orlando - Eng Dir                  Information    -
PConroy - Dir NSA                    Infoprmalion JPollock - site VP                concurrence COMMENTS C. L, Parker is responsible for corporate procedures for Privatel use.
G Section II          Correspondence Screening Does this letter contain commitments? if "yes," identify the commitments with due dates                     Yes      0 in the submittal and in Section 1ii.                                                                        No       0]
Does this letter contain any information or analyses of new safety issues performed at NRC                  Yes      0 request or to satisfy a regulatory requirement? It "yes," reflect requirement to update the                 No       0 UFSAR in Section III.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                      Yes      fl etc.), if approved? If "yes," Indicate in Section Ill an action for the responsible                         No       0 department to determine the affected documents. (The Correspondence Preparer may Indicate the specific documents requiring revision, if known or may initiate an action for review.)
Does this letter contain information certified accurate? If "yes," identify the Information and             Yes document certification In an attachment (Attachment 9.5 may be used.)                                       No       0 Section III         Action Items I

NUCLEAR                 (NON)-QUAL'TY RELATED          EN-LI-106         REV. 0 MANAGEMENT MANUAL                     INFORMATMON USE                     (Typical)
Required Actions                                                        Due Date         Responsible Dept Note: Actions appropriate needed upon  approval action      should tracking    be capturedin the sysem                                    i, Implement procedures that describe where and when the Privatel Prior to use on Corporate Security devices can be used, how the identity and access authorization of sitee                 _
the Pmivatel users will be verified, how to confirm the Privatel' device is providing a secure conversation, and actions to be taken
* if the security or encoding of the conversation is suspected to be lost or compromised                                                   t_    __           .
Section IV        Final Document Signoff for Submittal Correspondence Preparer            IL A. England Final Submittal Review (optional)
Responsible Department Head          B. S. Ford

Prussman, Stephen G From:                        Pollock, Joseph E Sent:                        Tuesday, September 23,2008 12:26 PM To:                          Prussman, Stephen G

==Subject:==
RE: Privatel Phone Concur and-I have my-equipment.
Thanks Joe From: Prussman, Stephen G Sent: Tuesday, September 23, 2008 9:55 AM To: Gagnon, Daniel W; Pollock, Joseph E Cc: Vitale, Anthony J.; Orlando, Thomas; Conroy, Patric W

==Subject:==
Pnvatel Phone
 << File: CNRO2008 Privatel (final).doc >> << File: 2008 Submittal Review Form CNRO 2008-00030 Privatel.dc >>
Attached is the corporate letter for use of privatel phones. This letter was previously submitted. Addresses please E mail concurrence per procedure. Those on cc are for info.
1

SNUCLEAR                  MANAGEMENT               (NON)-QUALITY RELATED           EN-U-106           REV. 0 MANUAL                      INFORMATION USE                        (Typical)
ATTACHMENT 9.4                                                                             NRC SUBMITTAL REVIEW Letter #: CNRO 2008-00030                                    Response Due: September 30,2008

==Subject:==
Request fbr approval to use Privatel                Date Issued for Review: Sept. 16, 2008 telephone security devices to transmit safeguards information to authorized personnel Correspondence Preparer / Phone #: L. A. England 433-5766 Section I         Letter Concurrence and Aareement'to Perform Actions POSITION i NAME                             Action                                    Signature (concurrence, certification, etc.)       (sign, interoffice memo, e-mail, or
___telecom) r, *Jfl*             /I....ot                                                        ,
COMMENTS C. L. Parker is responsible for corporate procedures for Privatel use.
Section II        Correspondence Screening Does this letter contain commitments? If "yes," identify the commitments with due dates                 Yes       19 in the submittal and In Section Ill.                                                                    No        E]
Does this letter contain any information or analyses of new safety issues performed at NRC             Yes       0]
request or to satisfy a regulatory requirement? If "yes," reflect requirement to update the             No        [
UFSAR In Section Ill.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                 Yes       []
etc.), if approved? If "yes," Indicate in Section iII an action for the responsible                     No        0 department to determine the affected documents. (The Correspondence Preparer may Indicate the specific documents requiring revision, if known or may Initiate an action for review.)
Does this letter contain information certified accurate? if "yes," identify the information and         Yes       F]
document certification in an attachment. (Attachment 9.5 may be used.)                                  No        0 Section III       Action Items I Required Actions                                                           Due Date           Responsible Dept.
Note: Actions needed upon approvalshould be captured in the PC- P

appropriateaction tracking system Implement procedures that describe where and when the Privatel       Prior to use on   Corporate Security devices can be used, how the identity and access authorization of    site the Privatel users will be verified, how to confirm the Privatel device is providing a secure conversation, and actions to be taken if the security or encoding of the conversation is suspected to be lost or compromised                                                I                 I Section IV        Final Document Signoff for Submittal Correspondence Preparer              L. A. England Final Submittal Review (optional)
Responsible Department Head          B. S. Ford

2 ift~~ter          MANAGEMENT
                         -   NUCLEAR                  (NON)--QUAUTY RELATED           EN-LI-106           REV. 0 Etery      I   MANUAL INFORMATION USE                        (Typical)
ATTACHMENT     9.4                                                                         NRC SUBMrTTAL REvIEw Letter #: CNRO 2008-00030 [2.08.050]                        Response Due: September 30, 2008

==Subject:==
Request for approval to use Privatel                Date Issued for Review: Sept. 22, 2008 telephone security devices to transmit safeguards information to authorized personnel Correspondence Preparer I Phone #: L. A. England 433-5766 (M.Gatslick 8373)
Section I         Letter Concurrence and Agreement to Perform Actions POSITION I NAME                            Action                                    Signature (concurrence, certification, etc.)        (sign, interoffice memo, e-mail, or telecom)
Manager, Securlty/D. Burke           Concurrence Manager, Licensing/J. Lynch          Concurrence Director, NSAIS. Bethay              Concurrence Site VP/ K.Bronson                   Concurrence COMMENTS C. L. Parker is responsible for corporate procedures for Privatel use.
Section II        Correspondence Screening Does this letter c:ontain commitments? If "yes," identify the commitments with due dates                 Yes      [
in the submittal and in Section II1.                                                                     No       El Does this letter contain any information or analyses of new safety issues performed at NRC              Yes       El request or to satisfy a regulatory requirement? If "yes," reflect requirement to update the             No        [
UFSAR in Section III.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                  Yes       [
etc.), if approved? If "yes," indicate in Section Ill an action for the responsible                     No        [
department to determine the affected documents. (The Correspondence Preparer may indicate the specific documents requiring revision, if known or may initiate an action for review.)
Does this letter contain information certified accurate? If "yes," identify the information and         Yes       F1 document certification in an attachment. (Attachment 9.5 may be used.)                                  No           J Section III      Action Items Required Actions                                                          Due Date          Responsible Dept.
Note: Actions needed upon approval should be capturedin the PPP5

NUCLEAR MANAGEMENT               (NON)-QUALITY RELATED          EN-LI-106        REV. 0 MAULINFORMATION                  USE                    (Typical) appropriateaction trackinaq system Implement procedures that describe where and when the Privatel         Prior to use on  Corporate Security devices can be used, how the identity and access authorization of      site the Privatel users will be verified, how to confirm the Privatel device is providing a secure conversation, and actions to be taken if the security or encoding of the conversation is suspected to be lost or compromised Section IV        Final Document Signoff for Submittal Correspondence Preparer              L. A. England Final Submittal Review (optional)
Responsible Department Head          B. S. Ford

Page 1 of I Gatslick, Mary From:      Bethay, Stephen Sent:      Wednesday, September 24, 2008 5:43 PM To:        Gatslick, Mary

==Subject:==
RE: 2.08.050 (CNRO2008 Privatel (final)).doc This is OK. Not sure you got my earlier response From: Gatslick, Mary Sent: Wednesday, September 24, 2008 1:16 PM To: Bethay, Stephen

==Subject:==
2.08.050 (CNRO2008 Privatel (flnal)).doc Steve:
Attached for your review and concurrence is a letter requesting the approval to use a secure type of telephone to transmit SGI.
Currently Fitz already uses such a phone.
Joe Lynch and Dave Burke have both it and signed off.
In the second paragraph of the first page, is the following:
"The Privatel model 960V telephone security device, software version 7.10 conforms to Federal Information Processing Standard (FIPS)140-1 and is currently listed by the National Institute of Standards and Technology as a validated to FIPS-140-1 cryptographic module as of the January 4, 2008 update for the year 2000." This sentence is referring to the NRC approved certificate for use, hence the disconnect between the January 08 date and the reference to "year 2000". We have a similar type situation with the certificate we hold for the use of PGP (encryption software), even though there are newer versions of the software out there we are only certified to use a specific version.
: Thanks, Mary G.
9/29/2008

OUTGOING CORRESPONDENCE CHECKLIST Document Reviewed:                    2,08.050 The Preparer and Reviewers of this document may signify their reviews of each item on the checklist by initialing in the boxes below and signing on the signature lines above. If an Item on the checklist is not applicable, then "NIA" should be entered in the box.
GENERAL        REVIEW is free of spelling, grammarand typographicalerrors.                         Preparer      P eer Reviewer, 1G       The submittal                                                                            Z        tv,, _A          -
: 2.       The letterandall attachmentsare in the correct formal Does an industry standard, such as an NEI white paper, or NRC guidance, exist for this type of submittal?
: 3.       The cover letter identifies the NRC TAC number, if one has been assigned.
: 4.      A statement of oath or affirnationis L4s-(tciircle one) required.
Refer to NRC RIS 2001-18 "NRC Requirements for Oath or Affirmation."
: 5.       The letter, or any of its attachments,does I           yt (circleone) contain safeguardsinformation 6        This letter orany of its attachments,doestdas-xJkrcle one) contain information exempt from public disclosufii-bra--ordancewith 10 CFR 2.390 or 10 CRF 73.21(e).
: 7.       The letter, or any of its attachments,doesle                     one) contain copyrighted material
: 8.       The letter is addressedto the correctorganizationor individual Correspondence is generally sent to the NRC Document Control Desk.
: 9.       The distribution(via the cc: list) is appropriatefor the subject Are the correct addrfg        are used? Are there any duplicates?
: 10. Action(s) are A            le     one) requested of the NRC, and an action date has been Included.
Justification for the schedule should be included in the letter.
The le~     e / dioes not (circle one) contain any commitments.
Letters wffi--commitments shall have the following statement in the letter:
         "Commitments made by the Licensee in this letter are listed in Enclosure to this letter."
(NOTE: This does not apply to LERs - commitments are contained in the body of the correspondence.) Letters not containing commitments shall have the following statement: "There are no commitments contained in this letter."
TECHNICAL REVIEW To be completed following the preparation of the correspondence                  Pre     r      Peer Reviewer folder.
: 12. Are the appropriateorganizations/individualslistedon the review and concurrence forms? Include organizations providing statements of fact.
: 13. Have each of the references listed in the letter been formally accepted by Entergy? Are they available? Do they support the conclusions contained in the correspondence? Have they been identified by id number, date, title and revision?
: 14. Have "statements offact" been identified and verified?
This includes confirmation that stated actions have been completed.
Is supporting documentation(e.g., letters, data, reports,etc.)    Included in the concurrence package?
Has applicableregulatoryguidance been used? Are deviationsjustified?
Applicable guidance includes: NRC Generic Letters. NRC Bulletins, notes from meetings or telephone conversations with the NRC, etc.
: 17. Are the enclosures orattachments "standalone"? Enclosures or attachment must contain all the necessary information to support conclusion of submittal.
: 18.      Have changeg to existing NRC commitments been identified? Changes must be reviewed using appropriate commitment management procedures.
: 19.      Are the corrective actionsproposed appropriate?Do they address the root causes, prevent recurrence? Do they have reasonable completion dates?
: 20. 1 Is ita response to a NOV-noice of'violation? Letters responding to Notices of Violations (NOVs) address all required items pursuant to 10 CFR 2.201 and/or as specifically instructed by the NOV. The response considers other pertinent items arising from the event review, such as "extent of conditions."
FINAL REVIEW (To be completed before management signature.)                                         re  rer      Peer Reviewer
: 21. 1 All the requiredconcurrence signatureshave been obtained.
22       Comments obtained during the concurrence cycle been resolved and/or changes incorporated.
: 23. All the dates in the document are correct and consistent
: 24. Any letters, attachments,enclosures, drawing, etc., to be included with the correspondenceare enclosed LER SPECIAL DISTRIBUTION (Preparer completes this section.)                                        Pr   rer      Peer Reviewer
: 25. Signed correspondencesent electronically to INPO (emailaddress:
lerevents@inpo.org)
Page 1 of 2

OUTGOING CORRESPONDENCE CHECKLIST (CONTINUED)
Document Reviewed:               20.8.050
: 26. Co of signed LER sent to CNO.
MAILING, FILING, AND RECORD KEEPING (To be completed following letter signature.)            Preparer Peer
___Reviewer
: 27. Have Entergy identificationnumber(s) been enteredon the letter In the appropratelocations?
: 28. Do page numbers appearon allpages, as appropriate,including attachments?
: 29. Verified that all parts of the signedcorrespondenceshall be mailed as follows:
Cover letter with all attachments and/or enclosures have been dearly identified within the submittal.
Attachments, enclosures, and other information NOT intended to be sent (e.g.,
proprietary information, personnel medical files) per the distribution list are not enclosed Submittal signed correctly and page order is correct.
Document is administratively error free.
* Sent to the NRC by utilizing directed mail/delivery service priority.
: 30. Correspondencehas been mailed.
: 31. Correspondencehas been sent to record managemenL
: 32. Condition reportentries, if appropriate,have been made by the assigned Licensing engineer.
: 33. ff the correspondenceis being sent electronicallyor by CD-ROM, it was prepared in accordance with appropriate NRC guidance? (PI data should be submitted in accordance with RIS 2001-25, "Voluntary Submission of Performance Indicator Data.")
: 34. The email has gone through the appropriate reviews and is attached as part of the package.
: 35. The email acknowledgment is part of the package.
Other requirements Page 2 of 2

NUCLEAR                   (NON)-OULrY    RELATED         EN-LI-106           REV. 0 MANAGEMENT MANUAL                       INFORMATION USE                       (Typical)
ATTACHMENT 9.4                                                                            NRC SueMn'r.L REVIEW Letter #: CNRO 2008-00030                                    Response Due: September 30, 2008

==Subject:==
Request for approval to use Privatel                Date Issued for Review: Sept. 16, 2008 telephone security devices to transmit safeguards information to authorized personnel Correspondence Preparer I Phone #: L. A. England 433-5766 Section I         Letter Concurrence and Aareement to Perform Actions POSITION I NAME                             Action                                   Signature (concurrence, certification, etc.)      (sign, interoffice memo, e-mail, or telecom)
Licensing Review                     Concurrence                                                       5 "7-0' Licensing Manager                    Concurrence Security Manager                     Concurrence                                      ,,X                   '71.7 Director NSA                         Concurrence                                                            14/v GMPQ                                 Concurrence Site VP                              Concurrence COMMENTS C. L. Parker is responsible for corporate procedures for Privatel use.
Section II        Correspondence Screening Does this letter contain commitments? If "yes," identify the commitments with due dates                 Yes
* in the submittal and in Section Ill.                                                                    No       [E Does this letter contain any information or analyses of new safety issues performed at NRC              Yes      El request or to satisfy a regulatory requirement? If "yes," reflect requirement to update the             No       0 UFSAR In Section III.
Does this letter require any document changes (e.g., procedures, DBDs, FSAR, TS Bases,                  Yes      11 etc.), if approved? If "yes," indicate in Section Ill an action for the responsible                     No       0 department to determine the affected documents. (The Correspondence Preparer may indicate the specific documents requiring revision, If known or may initiate an action for review.)                                                                                                 .
Does this letter contain information certified accurate? If "yes," identify the information and         Yes      0 document certification in an attachment. (Attachment 9.5 may be used.)                                  No     10 Section Ill       Action items 1)1}}