ML18095A729

Letter - NRC Approval of Global Laser Enrichment Authorization to Operate the Classified Network and Updates to the Security Plan Documents

ML18095A729
Person / Time
Site:	07007016
Issue date:	04/09/2018
From:	Jacob Zimmerman NRC/NMSS/DFCSE/ECB
To:	Jenny P GE-Hitachi Global Laser Enrichment
Bartlett M
Shared Package
ML18095A789	List: ML18095A729
References
Download: ML18095A729 (5)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001

April 9, 2018

Ms. Pat Jenny, Security Manager General Electric-Hitachi Global Laser Enrichment, LLC P.O. Box 780 3901 Castle Hayne Road

Wilmington, NC 28402

SUBJECT:

U.S. NUCLEAR REGULATORY COMMISSION APPROVES GLOBAL LASER ENRICHMENT AUTHORIZATION TO OPERATE THE CLASSIFIED NETWORK AND UPDATES TO THE SECURITY PLAN DOCUMENTS

Dear Ms. Jenny:

By letter dated February 22, 2018 (GLE-2018-0019) (Agencywide Documents Access and Management System [ADAMS] Accession Number ML18082A609), Global Laser Enrichment (GLE) requested continued Authorization to Operate (ATO) a classified network. This submittal also provides revised security documentation including:

• GLEP-00009-R, Revision (Rev.) 16: "Standard Practice Procedures Plan (SPPP) for the Protection of Classified Matter," (ADAMS Number ML18082A617);

• GLEP-00015-R, Rev 5.1, "Program Cyber Security Plan - Engineering and Industrial Control System Environments," (ADAMS Number ML18082A613); and

• GLEP-00023-R, Rev 8.2, "Figure 1 of 7 - Classified Distributive Information Network," (ADAMS Number ML18082A618).

As the Authorizing Official for the GLE classified cyber networks, the U.S. Department of Energy (DOE) Nuclear Energy Oak Ridge Site Office (DOE NE-ORSO) certifies and accredits that the Program Cyber Security Plan (PCSP), GLEP-00015-R, Revision 5.1, and the Classified Distributive Information Network (CDIN), GLEP-00023-R, Revision 8.2 are acceptable, see Enclosure (ADAMS Number ML18095A830). The U.S. Nuclear Regulatory Commission (NRC) staff also confirmed that the revisions to the PCSP and the CDIN implement changes agreed upon between the NRC, DOE, and GLE staff during the site visit held on February 21, 2018 (ADAMS Number ML18068A235).

In addition, these revisions to the PCSP and CDIN resolve the request for additional information provided to GLE by NRC letter dated February 6, 2018, "Request for Additional Information Regarding Global Laser Enrichment Proposal to use Encryption for Communications Outside the United States," (ADAMS Number ML18030B173). The revisions to the PCSP remove the proposed references to Type 1 encryption for communications between the U.S. and Australia.

The NRC staff understand that GLE is considering alternatives for data transfers of classified information between the U.S. and Australia that will comply with National Security Agency directives. These alternate proposals for encrypted communications will be submitted for NRC and DOE review at a future date.

P. Jenny 2 Based on the NRC staff's review of the PCSP and CDIN revisions and the certification and accreditation by DOE, the NRC approves GLE's request for continued ATO of their classified network as documented in the revised PSCP, GLEP-00015-R, Revision 5.1. The ATO allows for processing up to, and including, SECRET-Restricted Data with no change in the current expiration date ending November 2018. The NRC also approves the revisions to the CDIN drawings in, GLEP-00023-R, Rev. 8.2.

In order to re-authorize this classified network before the current November 2018 expiration date, GLE may submit the 2018 Continuous Monitoring Report to the NRC and DOE NE-ORSO for review. Once this Report is determined to be acceptable, DOE NE-ORSO, as Authorizing Official, will be able to recommend renewal of the ATO for the classified cyber network for an additional 3 years.

GLE's update to the Standard Practice Procedure Plan (SPPP), GLEP-0009-R, Rev. 16, was also reviewed by the NRC staff. It consisted of editorial revisions to the designation for a classified storage room and was determined to be consistent with the configuration of the GLE facility, as reviewed by the NRC and DOE staff during the site visit on February 21, 2018.

Rev. 16 does not reduce the effectiveness of the SPPP and is consistent with NRC regulations in Title 10 of the Code of Federal Regulations (10 CFR) Part 95. The NRC staff approves the SPPP, GLEP-0009-R, Rev. 16.

This letter closes out the Cost Activity Code 000225/07007016/C-2017-CYB-0000, "Review of the GLE PCSP Rev. 5, GLEP-00015-R."

In accordance with 10 CFR Section 2.390 of the NRC's "Agency Rules of Practice and Procedure," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records component of NRC's ADAMS. ADAMS is accessible from the NRC Website at: http://www.nrc.gov/reading-rm/adams.html. If you have any questions concerning this letter, please contact Mr. Matthew Bartlett at 301-415-7154, or via e-mail to Matthew.Bartlett@nrc.gov. Sincerely,

\RA\

Jacob I. Zimmerman, Chief Enrichment and Conversion Branch

Division of Fuel Cycle Safety, Safeguards, and Environmental Review

Office of Nuclear Material Safety and Safeguards

Docket No. 07007016 License No. SNM-2019

Enclosure:

DOE Approval Letter

cc:

Jim Hutson, DOE

Randy DeVault, DOE P. Jenny 3

SUBJECT:

U.S. NUCLEAR REGULATORY COMMISSION APPROVES GLOBAL LASER ENRICHMENT AUTHORIZATION TO OPERATE THE CLASSIFIED NETWORK AND UPDATES TO THE SECURITY PLAN DOCUMENTS DATED: April 9, 2018

DISTRIBUTION: FCSE r/f ECB r/f OSiurano-Perez, NMSS JKEverly, NSIR LPitts, RII MSykes, RII TVukovinsky, RII ADAMS Package Accession Number: ML18095A789 OFFICE FCSE/ECB FCSE/FMB NSIR FCSE/ECB NAME MBartlett TBrockington DParsons JZimmerman DATE 04/05/2018 04/06/2018 04/09/2018 04/09/2018 OFFICIAL RECORD COPY