Regulatory Guide 5.77

Insider Mitigation Program

ML15219A609
Person / Time
Issue date:	03/31/2009
From:	Office of Nuclear Regulatory Research
To:
References
FOIA/PA-2015-0349, RG 5.77
Download: ML15219A609 (19)

• U.S. NUCLEAR REGULATORY COMMISSION March 2009@o FIEO NCERRG LTRRESEARCH Division 5REGULTOYGUIDEREGULATORY GUIDE 5.77(Draft was issued as DG-501 1, dated December 2008)(New Regulatory Guide)INSIDER MITIGATION PROGRAMA. (U) INTRODUCTION(U) This guide describes an approach that the staff of the U.S. Nuclear. Regulatory Commission(NRC) considers acceptable for an insidcr mitigation program (IMP) at nuclcar power reactor facilities..Title 10. of. the Code of Federal Regulations (10.. CFR) Section 73.55, "Requirements for Physical.Protection of Licensed Activities in Nuclear Power Reactors against Radiological Sabotage," specificallyparagraph (b)(7) states that licensees shall establish, maintain, and follow an access authorization programhin accordance with. 10. CFR 73.56, "Personnel Access Authorization Requirements. forNuclear PowerPlants." The licensee's physical security plan must include descriptions ofthe access authorizationprogram and the IMP. Furthermore, pursuant to 10 CFR 73.55(b)(9), licensees shall dcsign andimplement the, IMP to. oversee, and monitor the, initial and continuing trustworthiness, and. reliability ofindividuals granted unescorted access or retaining unescorted access authorization to a protected or vitalareas. The IMP should use defense-in-depth mcthodologics to minimize the potcntial for an insider toadversely affect, either directly. or indirectly, the licensee's capability to prevent significant core damageor spent fuel sabotage..(U) This document provides guidance for an IMP that would meet the requirements in10 CFR 73.55(b)(7) and (b)(9) and the latest NRC staff endorsed version of the industry's guidancedocument, Nuclear Energy. Institute. (NEI). 03-01,. "Nuclear Power. Plant Access Authorization Program."These sources provide. an acceptable approach for an IMP. that meets the provisions of 10 CFR 73.55 aspart of the liccnsee's physical security plan. These sources arc also consistcnt with the guidanccdescribed in this regulatory, guide.(U) The NRC issues regulatory guides to describe and makc available thc methodsithat the NRC staff considers acceptable foruse in implemcnting specific parts of the agency's regulations, techniques that the staff uses in evaluating specific problems orpostulated accidents, and data that the staff needs in reviewing applications for: permits. and liccnses. Regulatory guides arc notsubstitutes for regulations, and compliance with them is not required. Methods and solutions that differ from those set forth inregulatory guides will be deemed acceptable if they provide a basis for the finding required for thle issuance or continuance ofpermit or license by the Commission.(U) This guide was issued after consideration of comments received from stakeholders.OFFICIAL USE O"NLY Dr SECURIT RELAT'-,D ,I-,-,',-,,,,....

OFFICIAl "SE ONLY-SECUR!TY RELATED INFORMATION(U) Regulatory. guides are issued in 1 0. broad divisions-l, Power Reactors; 2, Research and Test Reactors; 3, Fuels and MaterialsFacilities; 4, Environmental. and Siting; 5, Materials and Plant Protection; 6, Products; 7, Transportation; 8, Occupational HeIalth;9, Antitrust and Financial Review; and 10, General.(U) This regulatory guide contains guidance on how licensees should implement an IMP. Licenseesmay employ methods other than those described herein for. meeting the. Commission's regulations if tihechoscn measures satisfy the stated Commission requirement(s). The approaches and examples describcdin this regulatory guidance provide one, methodology for satisfying the Commission's, requirements for anIMP at nuclear power. reactor. facilities.(U) Licensees with. operating reactors licensed under 10 CFR Part 50, "Domestic Licensing ofProduction and Utilization Facilities;" and 10 CFR Part 52, "Licenses, Certifications, and Approvals forNuclear Power Plants," can apply the guidance in this regulatory guide before fuel is allowed on site(protected area)..(U) Any information collection activities mentioned in this regulatory guide are included asrequirements in. 10 CFR 73.8, "Information Collection Requirements," which provides thae regulatorybasis for this guide. The NRC considers the guidance contained in this document to be the most currentconcerning acceptable approaches.(U) The NRC issues. regulatory guides to describe methods that the staff considers acceptable for use.in implementing specific. parts of the, agency's regulations, to. explain techniques that, the staff uses, inevaluating specific. problems or POstulated accidents, and to provide guidance to applicants; Regulatoryguides are not substitutes for regulations and compliance with them is not required.(U5). Thisiregulatory guide relates to information collection requirements covered by 10 CFR Part 73,and that the Office of Management and Budget (0MB) approved under. OMB control number 3150-0002.The NRC may neither condUct nor sponsor, and a person is not required to respond to, an informationcollection request or requirement unless the requesting document displays. a currently valid 0MB controlnumber.RG 5.77, Page 2OFFICAL US CNLY ..........R.L ... INFORMATION US ONLYt'KI V REIA','TEi INOMt":SATIO"NB. (U) DISCUSSION(U) Bccause of changes. to the threat, cnvironment after thc evcnts of Septembcr 11, 2001, theCommission began reevaluating physical protection program requirements at nuclear power reactorfacilities. This changing threat environment resulted in several significant protection and regulatoryenxhancements, to ensure that licensees maintain the capability to provide high. assurance of the health and.safety of the public against the design-basis threat (DBT). Specifically, the provisions of 10 CFR 73.1,"

Purpose

and Scope," describe how an insider might cauise or assist in radiological sabotage.Furthermore, in a Commission order dated April 29, 2003 (EA-03-086), the NRC required licensees toaddress the insider threat. Pursuant to this order, licensees updated their site security plans to specify howthey will comply with the requirements of 10 CFR 73.1 and the DBT order.(U) A l icensee' s access authorization program, fitness-for-duty program, and behavior: observationprogram (BOP) provide the framework for addressing the. insider, threat. Once ant individual has. beengranted unescorted access to protected and vital areas of a power reactor facility, preventing an adverseevent becomes dependent on detecting the insider through one of these programs andlor by denying theundetected insider the opportunity to commit the. act by other means, such as physical and cyberprotective security measures, as appropriate. Performance-based program requirements are intended togenerically satisfy the minimum level of perfonnance that a licensee's physical protection program mustachieve to provide adequate protection and. minimize. the. potential for an insider to adversely affect, either.directly or indirectly, the licensee's capability to prevent significant core damage or spent fuel sabotage.(QUO-SRI) Pursuant to 10 CFR. 73.55(b)(7) and (b)(9), which provide the. necessary flexibility forlicensees to address the complexities of an insider threat, the. NRC staff has nonetheless, established theminimum criteria required to. meet the DBT goal of mitigating the active insider, active violent insider, orpassive, insider in Section C of this guide.(b)(7)(F(U) The JMP elements are designed to address a broad context of trustworthiness and reliability issuesto minimize the potential for adverse actions by an insider. An insider may create an adverse conditionother, than radiological sabotage that could affect, the licensee's, ability, to respond to a safety or security.event or could affect the nonmal operation of the plant. Licensees should consider, and be sensitive to,subtle changes in an indiv idual's or actions ov er time and use appropriate IMP elements (e.g.,behavioral, observation program), to assess and mitigate potential adverse, acts. by insiders.(U) A trusted person with protected or vital area access, or access to digital computer andcommunications systems and networks from outside the protected area, can pose a significant threat to thesafety and security of a nuclear power plant.. Licensees may be. unable to identify the cause, of incidentsthat are indicative of potential tampering, which makes it difficult to conclusively determine if a conditionRG 5.77, Page 3OFFICIAL USE ...... ..... , '-,,,-,,,-,', ,"- ,,,,,,-,-,,,AT,,'O , -SECUR"T'¢-RELATED INFORMyATIONthat was discovered was the result of tampering.. Irrespective of whether security events involve acts thatare. within the scopc of 10. CFR 73.lI and the. DBT, acts of malfeasance. or tampering are particularly.serious, matters because of the potential, adverse, impact to. the safety and security of the nuclear powerplant. These events demonstrate the need for an IMP that ensures the trustworthiness and reliability ofspecific individuals, working for, or supporting a nuclear, power plant..(U) The broad spectrum of issues related to insider threats ranges from the premeditated actions of anindividual acting as a single. source of origin, to. events that, might be sufficient to. motivate someone, to.act, such as extortion. The highly unpredictable threat requires a comprehensive, approach to addressingboth the intent and capability, of the potential insider. Licensee internal organizations should coordinateto, provide the defense-in-depth necessary, to mitigate the insider threat.. An example offthis is the, need forsecurity and human resources personnel, to work closely with employee assistance program (EAP)personnel to. ensure that an individual demonstrating the potential to harm themselves or others. is reportedto appropriate security personnel for evaluation as a potential insider threat without, creating the.perception that seeking help. via the EAP will result in adverse action..RG 5.77, Page 4 C. (U) REGULATORY POSITION1. (U) General Requirements(U) In accordance with Title 10 of the Code of Federal Regulations Part 73 (10 CFR 73), "PhysicalProtection of Plants and Materials,". Section 73.55, "Requirements for physical protection of licensedactivities in nuclear power reactors against radiological sabotage," the Commission has established designrequirements for a nuclear power reactor facility physical protection program, including the performancecriteria to detect, assess, interdict, and. neutralize threats up. to and including the DBT of radiologicalsabotage, thereby preventing significant core damage and spent fuel sabotage. Under 10 CFR 73.55(b)(7)and(b)(9), licensees shall establish, maintain, and implement an access authorization program and IMP inaccordance with 10. CFR 73.56 and describe the. programs in their physical security plans. The IMP mustbe designed and implemented to oversee and monitor the initial, and continuing trustworthiness andreliability of individuals granted unescorted access or retaining unescorted access authorization to aprotected or. vital area, and. implement defense-in-depth methodologies, to minimize the potential for aninsider to adversely affect, either directly or indirectly, a licensee's capability to prevent significant coredamage or spent fuel sabotage.(U) In 10 CFR Part 73, "Physical Protection of Plants and Materials," Section 73.56, "PersonnelAccess Authorization Requirements. for. Nuclear Power Plants," a licensee is required to establish andimplement a program, as a part of its physical security plan, for granting unescorted access to protectedand vital areas of a nuclear power plant. This program's objective is to provide high assurance thatindividuals granted unescorted access are trustworthy and reliable and do not constitute an unreasonablerisk to public health and safety, including the potential to. commit radiological sabotage..(U) This document contains guidance for an acceptable IMP that would meet the requirements of10 CFR 73.55(b)(7) and (b)(9). .Furthermore, the latest NRC staff endorsed version of NEI 03-01 alsodescribes an approach that the NRC. staff has. found acceptable. in meeting the provisions of 10 CFR 73.56with respect to. an IMP. as part of the licensee's physical security. plan, and is consistent with the guidance.described in this regulatory guide..2.. (U). Elements of an Acceptable Insider Mitigation Program(U) Threat is a function of intent and capability... To provide defense-in-depth against threats, alicensee should establish an IMP that will address both the, human reliability factors associated with intentand physical protection measures to mitigate the capability of a potential insider to commit an adverse act.(U) As a minimum to mitigate the potential for an insider, an IMP should consist of the following "elements for all personnel with unescorted access authorization to the protected and vital areas of afacility: (1) a security determination (clearance or access authorization); (2) initial and random substanceabuse testing; (3) p~sychological assessments which may include a medical evaluation;. (4) review by theimmediate supervisor at least annually; (5) a security determination of the periodic reinvestigation..2.1. (U) Insider Mitigation Prog~ram Elements-Critical Group2.1.1. (U).. Participationi(U) Though insiders. may occupy, any position within a licensee's organization and elements of theIaMP apply to. all personnel that are. in an unescorted. access authorization status, some groups areconsidered to have a higher potential for insider threat (i.e., greater capability) because of theirRG 5.77,. Page 5 SECURITY-RELATED. '""-""' ^-'.

I tf ll VI IDlI"VX ,A knowledge, access to, or possession of weapons inside the protected area of a licensed facility. Pursuantto 10 CFR 73.56(i)(1)(v,)(B), for any individual, in the critical group the trustworthiness and reliabilitydetermination must be based on a criminal history update and credit history re-investigation within 3years of the date on. which these elements were last completed, or more frequently, based on jobassignments as determined by the licensee or applicant and a psychological re-assessment within 5 yearsof the date on which this element was last completed:Individuals who perform one or more of the following job functions must be in the critical group:* All licensed reactor operators.* Non-licensed operators. Non-licensed operators include those individuals responsible for theoperation of plant systems and components, as directed by a reactor operator or senior reactoroperator. Non-licensed operators. also monitor plant instrumentation and equipment and principallyperform their duties outside the control room.* Individuals who have extensive knowledge of defensive stratcgies and designa and/or implementationof the plant's defensive strategies, including:.a. site security. supervisorso site security. managerso corporate security, managers (nuclear and/or applicable contractor security managers)o. security training instructors* Individuals in a position to grant an applicant unescorted access or unescorted access authorization,including assess authorization managers. However, this requirement does not apply to qualifiedcontractor/vendors (C/Vs) that certify elements of the access authorization program.* Individuals who have access, extensive knlowledge, or administrative control over plant digitalcomputer and communication systems and networks as identified in 73.54, including:.o plant network systems administratorso IT personnel who are responsible for securing plant networksNote:. the term "IT personnel" should also consider. personnel who have the ability andaccess to change the configuration of control systems (e.g., Supervisory Control and DataAcquisition (SCADA) systems) or other systems that use embedded devices (e.g.,Electronically Erasable Programmable Read-Only Memory (EEPROMs)).* Individuals assigned a duty. to search for contraband (e.g., wecapons, explosives, or inccndiarydevices).* Individuals qualified for and assigned duties as: armed security officers, armed responders, alarnmstation operators, response team leaders, and armorers.(b)(7)(F)RG 5.77, Page 6OFEF'CIAL USE ONLY--SECURITY-RlELATED INFORMvATION

.-'.I~tIr'IAI I ~ '*'MI V ~~*'I IDITV D1 '~r~r~ iI~IAA-rV~kIL I I.OLXI.Jr -I I --RL hLI I L.L IIlh F..JIIVIPh I (b)(7)(F)(U) The decision to include additional personnel in the critical group should be based on thelicensee's IMP, goals and performance objectives associated wvith mitigating Active Insiders (Al), Active.Violent Insiders (AVI), and Passive Insiders (P1). However, thosc personnel referenced under10 CFR 73.56(i)(1)(v)(B), must be included in the IMP. The NRC staff's policy concerning the insiderduring security performance evaluation testing is contained in RG 5.69, "Guidance for the Applicationof the. Radiological Sabotage Design-Basis Threat in the Design, Development, andImplementation of a Physical Security Program that meets 10 CFR 73.55 Requirements."2.1.2. (U) Initial Security Determination(U) Initial security measures for completing background investigations and other programmaticelements required by the NRC, through the implementation of the requirements of 10 CFR 73.56 and10 CFR 73.57, "Requirements for. Criminal History Checks of Individuals Granted Unescorted Access toa Nuclear Power Facility or Access to Safeguards Information by Power Reactor Licensees," and thelatest NRC staff endorsed guidance of NEI 03-01, provide high assurance that persons initially, selectedfor unescorted access or unescorted access authorization are trustworthy and reliable and do not present arisk to public health and safety or the common defense and security.2.1.3 (U) Drug and Alcohol Testing--Pre-access, Random, For cause, Post-event, and Followup(U) Drug and alcohol testing is an important element of the access authorization and fitness-for-dutyprograms. Pre-access, random, for cause, p)ost event, and followup. testing provides a deterrent thatsupports both safety and security and reinforces the fundamental concepts of trustworthiness andreliability.(U) The Pre-access, Random, For cause, Post-event, and Followup drug and alcohol testing elementof an IMP may be implemented by applying the guidance. for meeting the requirements of10 CFR Part 26, "Fitness for Duty Programs," and the latest NRC staff endorsed guidance described inNEI 03-01, "Nuclear Power Plant Access Authlorization Program."2.1.4 .(U). Psychological Assessments including Medical Evaluations-ilnitial and Periodic(U) Initial psychological assessments should ensure that any testing mechanism applied, in whole ,orin part, to. a psycho'logical determination of suitability for unescorted access includes the opportunity todetect the need for a medical evaluation as described in paragraph (c) below. As required under10 CFR 73.56(e), the psychological assessment must be designed to evaluate the possible adverse impactof any noted psychological characteristics on the individual's trustworthiness and reliability..(U) The psychological assessment must include the following:a. (U) The administration and interpretation of a standardized, objective, professionallyaccepted psychological test that provides information to identify indications ofRG 5.77, Page 7OFFICI'I'IAL US Oe 'NLY SE,-R.IDr E--,ATErD. ,,.N,-OR,.'T,.*, -SECURITY'-RELATED INFORMATIONdisturbances in personality, or p)sychopathology. that may have adverse implications for anindividual's trustworthiness. and. reliability.b. (U) Predetermined thresholds established for each scale in accordance with 10 CFR73.56(e)(2) must be applied in interpreting the results of the psychological test todetermine whether an individual shall be interviewed by a licensed psychiatrist orpsychologist. .If the individual receives scores on the psychological test that identify'indications of disturbances in personality or psychopathology that may have implicationsfor an individual's trustworthiness and reliability the.psychological assessment mustinclude a clinical interview. .The initial and periodic assessment should have theadditional focus of careful consideration of the psychopathology of the interviewee..Psychiatrists or clinical psychologists with the appropriate clinical training andexperience should carefully, apply procedures of evaluation assessment and diagnosis..derived from scientific research.c. (UY) The administrationl of a psychological assessmcnt may trigger a. medical evaluationto determine thae presence of any mental or physical condition that may cause asignificant defect in the trustworthiness, reliability, or judgment of the individual.Medical evaluations, triggered by. a psychological reconmmendation, should include areview of the individual's, prescribed medications to ensure that these medications do notimpair the person's~judgmnent to the extent that trustworthiness and reliability, arejeopardized. Individuals, identified as candidates for further medical review should be.referred to a physician for further evaluation. Medical personnel should evaluate possible.medical conditions, including those that may result from the use of illegal drugs, the.abuse of prescribed or over-the-counter medications, or the excessive, habitual use ofalcohol, in accordance with the requirements of 10 CFR. Part 26.(U). Pursuant to 10 CFR 73.56(i)(l)(v)(B), the psychological assessment must be conducted atintervals not to exceed once every 5 years for individuals in a critical group. Interviews used in theassessment should be conducted in a semi-structured manner and include, the recognition, of medicalconditions that could result in impaired judgments or could adversely impact the fitness-for-duty. ortrustworthiness and reliability of those. individuals who currently have unescorted access or unescortedaccess authorization status. While other. types of interviews are. permitted, a face-to-face, interviewconducted by an interviewer trained, to look for precursors of insider behavior is preferable for identifyingpersons. with potentially undesirable behavioral issues.(U) Prior to any psychological or medical assessment, the physician practitioner should review acur'ent position description of the person being interviewed and the most recently completed supervisory.review, if applicable and if the. review: contains that could assist the. physician practitioner intheir assessment.(U) The interviewing psychiatrists or clinical psychologists with the appropriate clinical training andexperience should incorporate the most recent supervisory review as one measure of the assessment..(U) If, in the course of conducting the psychological assessment, the licensed psychologist orpsychiatrist identifies or discovers any information, including a medical condition, that could adverselyimpact the fitness-for-duty or trustwvorthiness and reliability, of. any individual, based on standardsidentified in the regulation, who currently has unescorted access or unescorted access authorization status,10 CFR 73.56(e)(6) requires that he or she inform:. (I) the reviewing official of the discovery within 24hours, of the discovery; and (2). the medical. personnel designated in the site implementing procedures,RG 5.77, Page 8 OFFICIAL USE-..." "-" '"'"1"-""-' ""'-"[LTE '""-"'-"'^'-""who shall ensure that an appropriate evaluation of the possible medical condition is conducted under the.requirements of 10 CFR Part 26.(U) Licensees shall take appropriate action, in accordance with procedures, if disqualifyinginformation is provided as a result of a psychological assessment or to admninistratively withdrawunescorted access for any worker who has not met the psychological reassessment criterion.2.1,5 (U) Annual Review by Immediate Super'isor:(U) A review conducted by the assigned supervisor has value as an integral part of the BOP requiredby 10 CFR 73.56(i)(l)(iv).. This review creates a platform for interaction between the supervisor and theemployee to the extent that the supervisor has the opportunity. to become cognizant of any condition thatmay cause the employee to act or behave, in an unconventional manner. In addition, the supervisoryreview provides an opportunity for the supervisor to consider whether any circumstances may indicate theneed to. refer the employee for additional medical or psychological review.In some cases, the supervisor may not have frequent enough interaction with the individualtharoughout the review period needed to form an informed and reasonable opinion regarding theindividual's behavior, trustworthiness, and reliability.,. In this situation, the individual is also subject to anannual supervisory review in accordance with the requirements of the licensee's or applicant's BOP. The,interview may consist of: face-to-face contact, gathering of informaation from personnel who havefrequent interaction with the individual, or Other documented methods of gathering information to ensurethe supervisor can attest to the individuals continued trustworthiness, and reliability. Additionally, thelicensee should provide appropriate initial training of newly assigned supervisors and annual combinedsupervisory/worker refresher training. This process. should be defined in licensee procedurcs and policies.(U) The supervisory review may be satisfied by incorporating information developed over the.covered period. (i.e., annually) regarding the behavioral characteristics of the employee supervised. Thisinformation would typically include deviations from the behavioral norm that have been reported to thesupervisor through the implementation of the BOP, as wvelt as those deviations from the behavioral normpersonally observed by the supervisor. This review serves two purposes. First, it can identify issuesrelated to physical or. mental impairment that fall under the general' performance objective of10. CFR Part 26. Second, it can identify issues related to trustworthiness and reliability..2.1.5. a BOP TrainingLicensees should ensure that the BOP training includes: (1) the recognition that changes inemotional state can happen quickly; (2) typical conditions that can trigger behavioral anomalies;(3). the need for early intervention after the recognition of changes in behavior that typicallyindicate changes in emotional state; (4) the recognition of uncharacteristic deviations in co-worker interactions, uncharacteristic absences from work, uncharacteristic inattention to detail, orsuspected alcohol or drug abuse; and (5) the need to report the above conditions to theemployee's assigned supervisors or fitness-for-duty program manager.2.1,6. (U) Periodic Reinvestigation of Security Determination(U) Pursuant to. 10 CFR 73.56(i)(1)(v)(B)(1-5), members of the critical group must be reinvestigatedwithin 3. Years. of the datc on which the criminal history update and credit history re-evaluation were lastcompleted, or more fi-equently, based on job assignment as determained by the licensee or applicant, and aRG 5.77, Page 9tl-IF1A.!AL USE O.NLY--SECURITY-RELATED INFORMAtTION psychological re-assessment within 5 years of the date on which this element was last completed. Therequirements of this section apply, to all individuals with unescorted access authorization or. unescortedaccess who are members of the critical group. Individuals who have not satisfied the reinvestigation.requirements shall have unescorted access authorization or unescorted access administratively withdrawnuntil the reinvestigation has been completed, or the worker should be reassigned to non-critical, grouppositions until the required critical group reassessment can be completed.(U) The reinvestigation shall include the following:a. (U) A review of criminal history records obtained under 10 CFR 73.56(d)(7) and1 0 CFR 73.57, or as the Commnission may require, or as Federal statute may direct.Licensees should compare data returned from the criminal history. records check with theaccess authorization records of the person named in the record to ensure that the personhas complied with the self-reporting requirements in 10 CFR 73.56(g). Submissions offingerprints for the review of criminal history informationt should be handled separately.from investigations for outage staffing to preclude inadvertent outage staffing delays.b. (U) Licensees shall obtain a full credit history and review the history for the periodprovided as required by 10 CFR 73.56(d)(5). The individual should complete newconsent to screen and Federal Credit Reporting Act disclosure and authorizationstatement forms before'initiating this reinvestigation.c. (U) Licensees shall take appropriate action if disqualif~ying information is discoveredduring any reinvestigation rcvicw..(U) The start of the interval, for the next reinvestigation should be the date the reviewing officialcompleted a concurrent review of both the credit history and criminal history information. To provide forreasonable. consistency Of the. timeframe under review, the reviewing official should ensure that the.receipt of the credit history and the criminal history information are within 30 days of each other.3. (U) Fitness-for-Duty Considerations related to 10 CFR Section 26.10, "GeneralPerformance Objectives"(U) The use of illegal drugs and the intentional misuse of legal drugs and alcohol are only a few ofthe potential causes for concern with respect to an individual's state of mind as it relates to an insiderthreat.. In addition, physical and mental conditions that arc. not related to cithcr of these. may drivc anindividual to commit an adverse act. For example, sedative-hypnotic products (e.g., sleep disorder drugs).are widely prescribed and have been associated' with adversc behavior, including aggression, sleepdriving, and suicidal thoughts. Licensees should refcr to NRC Information Notice 2007-31, "U.S. Foodand Drug Administration Announcement Related to Certain Sleep Disorder Drugs," dated November 13,2007, for more information. In the context of insider threat, licensees should understand the relationshipsbetween BOP relating to identifying and reporting suspicious behavior, the. fitness-for-duty. programrelating to the evaluation of impairment-related behavior that could impact th~e trustworthiness andreliability of an individual, and the access authorization program that determines suitability for unescortedaccess.(U) Licensees are expected to consider the potential insider threat when making fitness-for-dutydeterminations associated with observed abnormal behavior.RG 5.77, Page 10OFFiCiAL USE ..... .-,, ,,IT-,,R-,L'-,-T,"-D- ,NFO,,=DA-rrIp OFFIC-,,-L ,..,-, O, L-,, SEC*-.URI, ,-RELAT, , iNFORMyATiON4. (U1) Access to Vital Areas(U) As. required by 10 CFR 73.56(.j), a licensee, shall establish, implement, and maintain a list ofindividuals who are authorized to have unescorted access to specific nuclear power plant vita] areasduring nonemergeney conditions. The list must include only those individuals who have a continuedneed for access to. those specific vital, areas in order to. perform their, routine, duties and responsibilities.The list must be approved by a cognizant licensee or applicant manager or supervisor who is responsiblefor directing the work activities ofthe individual who is granted unescorted access to each vital area. Thelist nmust be updated and reapproved no. less. frequently than every 31. days. The. intent is to minimizeinsidcr threats by reducing the. number of individuals having unescorted v'ital area access, and by limitingvital area access to those personnel requiring it to. perform their duties.(U) In determining continued need, licensees should consider event response, weckend or. holidayemergencies, or other "off-hours" operational responses. The licensee may determine that someindividuals are required to remain on the~..lisjt. _Personnel.-who fall into thi!s category will be evaluated atthe licensee's discretion. However, personnel should be evaluated by a cognizant licensee or applicantmanager or supervisor who is responsible. for directing the. work*activities of the individual..5. (U) Physical Protection Measures -Specific. Elements(U) In considering program elements needed to mitigate the Al and AVI, licensecs should develop afour part program that will:a. (U) ensure licensed operators are properly trained to recognize indications of tampering,which includes mis-positioning of equipment until dispositioned otherwise, to report suchconditions. in a timely manner, and to compensate for degraded conditions as appropriate;b. ensure armed security officers are properly trained to recognize indications of obvioustampering;c. ensure personnel who receive plant access training are. trained in. recognizing beh~aviors orconditions adverse to safe operations and security of the facility;b. (U) develop procedures, and training requirements to react effectively to conditions.relatedto actual or suspected tampering;c. (U) ensure that indications, oftampering are included in the corrective action program;and (b)(7)(F)e. The program should identify target set equipment that:(b)(7)(F)RG 5.77, Page 11IUSE1 I"NI Y SECURIITY RELIATED' INlFOr-MA^T'IrO OFFiC~t~AL O'NLYV_ SCURI:: "II::ITYV REIA'/TED" INIFORtMAT54IOINK(IU) While thle above engineered and administrative physical protection measures relate to target setequipment, licensees should remain aware that tampering with non-target, set equipment, such as safety orsecurity equipment, can adversely affect the ability to respond to events as required in compliance withthe regulations.(b)(7)(F)(U) Licensees should train security personnel to recognize and respond to obvious indications oftampering. .Except where precluded by immediate personnel safety concerns, operations abnormalities, orrestrictions under guidelines to keep. radiation dose rates as low as reasonably. achievable, an armedsecurity officer should patrol accessible areas that contain target set elements.(U) Licensee procedures should describe the operations and security response to actual tamperingevents. .Any. suspected tampering event should be entered into, the licensee's corrective action program.(b)(7)('F))I ' * .............. I(b)(7)(F). ..... I............ The Nuclear Energy Institute's NEL 03-12, latest NRC endorsed revision, "SecurityPlan Template," describes the specifics of a patrol program that the NRC has found acceptable.(b)(7)(F) I(b)(7)(F) I ........ Section 4.6.4, "Insider Mitigation," and Section 5,"Security. System Technology," of SAND2007-559 1, "Nuclear Power Plant Security AssessmentTechnicalManual," issued September 2007, outlines additional guidance for these types of measures..(OUO-SRI).. Licensees should ensure that searches. are performed in an acceptable. manner, that: willensure personnel are searched for contraband (explosives and firearms) before entering the facility. Thismakes, contraband searches an integral physical protection element of tlhe IMP.D. (U) IMPLEMENTATION(U). This section provides information to applicants and licensees regarding the NRC's plans for usingthis regulatory guide. No imposition or backfit is intended or approved in connection with its issuance.except as discussed. below.(U) As is the case with all NRC regulatory guides, licensees are not required to implement any of theguidance described in .this document. .However, except in cases in which an applicant or licenseeproposes or has established a. method for complying with specified portions of the NRC's regulations that.differs from the methods described in this. regulatory.guide, the NRC staff plans to use this guide toevaluate the adequacy of a licensee's IMP program..(U) The methods described herein will be used in evaluating: (I) submittals in connection withapplications for. construction permits, standard plant design certifications, operating licenses, earlysite permits,. and combined licenses; and. (2). submittals from operating reactor licensees who voluntarilypropose to. initiate system modifications if there is a clear nexus between the proposed modifications andthe subject for which guidance is provided herein.RG 5.77, Page 12, rr--r--l Al I If ~ rii-r- f I r1 IT--ifl-/ I")f'- A i r'fl?~rP A/ .-i'-f~rlUI-jU-IL,,~ UC,1- ~JL;{4. T -- ,i._...,ijixi i i i i-i__J iji-i ...di ,iVir'5 i -SECURIT'Y-RELATED. i ,,,.,,(U) BACKFIT STATEMENT(U) The staff prepared a backfit analysis for the final power reactor security rule for wvhich thisregulatory guide provides guidance. See 74 FR 13926, 13968 (March 27, 2009). This regulatory guidepresents the first instance of NRC staff guidance on the amnended rule.. Accordingly, the backfit statementin the final 2009. power. sccurity rules applies to this regulatory guide. No. further consideration ofbackfitting is. necessary for this regulatory guide.RG 5.77, Page 13 (U) GOSSARY(U) active insider-- a person who,. while in an. unescorted access. status and. within, the.protected. area, takes direct action to. assist a DBT. (e.g.,. participates in. planning,, uses. an.authorized key card to open a controlled access, door, creates an. operational. or securitydiversion, impedes. a response to. the threat)..(U) active, violent insider-- a person who, while in an unescorted access status and within theprotected area,. takes direct action to harm plant components, a member of the, security.force, or plant staff with the intent of preventing the operation of equipment or ofpreventing, the person. harmed from participating in protective, or. recovery, strategies,, orwho takes, action to. engage and/or, divert operations. or security, resources, from normal.protective or recovery strategies.(U) administrative withdrawal of UAA/UA--a process to temporarily withhold UAAIUA froman. individual, while action is taken to. complete or. update an element of the UAArequirements.(U) annual--requirements specified as. "annual'. should be. scheduled at a nominal 12-monthiperiodicity. .Performance may. be. conducted, up. to three. months before to three. monthsS after the scheduled date.(U) applicant--, applicants for an operating license, or holders of a combined constructionpermit and operating license (combined license), who choose to implement their accessauthorization programs,. which were approved by the. Commission. in their Physical.Security. Plan,. prior to receiving their operating licenses or their Commission findings..(U) background investigation (BI)--information from all. BI elements to. be. collectivelyevaluated, by the. reviewing, official pursuant to a determination, of trustworthiness, andreliability of an. individual.. Depending. upon. the. BI period,, the. BI. elements may. includeany or all of the following: verification of true identity, employment verification withsuitable inquiry (includes education in lieu of employment and. military. service, asemployment),, a credit check, and ch~aracter, and reputation. determination.(U) behavior observation program (BOP)--an awareness, program, that meets requirementsof both the access authorization and fitness-for-duty programs. Personnel are trained toreport legal actions;, to. possess. certain knowledge and, abilities. (K&A's). related, to. drugsand alcohol and. the recognition. of behaviors adverse, to the. safe. operation, and securityof the facility by observing the behavior of others in the workplace and detecting andreporting. aberrant behavior, or. changes in. behavior, that might adversely impact anindividual's trustworthiness or. reliability,. and. undergo an. annual supervisory review.(U) critical group--any individual, who. performs job functions that are. critical to the safe. and.secure. operation of the licensee's, facility. .This individua[ includes any i~ndivdual who.has been. granted. UA or. certified UAA and. performs one. or. more of. the. following jobfunctions:.a. (U) any individuals who have extensive knowledge of facility defensive strategiesor who design and/or, implement the. plant's defense strategies;RG 5.77, Page 14 b. (U) any individuals in a position to grant an. individual unescorted access or tocertify an individual unescorted access authorization;c. (U) any individuals assigned a duty to search for contraband (e.g., weapons,*explosives, incendiary devices);d. (U) any individuals who have access, extensive knowledge, or administrativecontrol over plant digital computer and communication systems and networks asidentified in § 73.54; ande. any individual identified in 10 CFR 73.56(i)(!)(v)(B)(5).(U). insider--a person who has been granted unescorted access or unescorted access*authorization under the requirements of 10 CER 73.56 or has the ability to accessinformation systems that: (1) connect to systems that connect to plant operatingsystems; or (2) contain sensitive information that may assist an insider in an attemptedact of Sabotage..(U) passive insider--a person who provides or attempts to provide safeguards or Otherrelevant information regarding a licensee's physical configurations, designs, strategies,or capabilities to. any person who does not have a functional or operational need toknow.(U) position description--a statement or description outlining the essential functions. of. a job.and the potential exposures and hazards associated with those functions, or theenvironment in. which the. functions, are. executed..(U). reinvestigation--a periodic inquiry or assessment conducted to ensure that individualscontinue to meet UAAIUA or FF0 program suitability requirements as defined in latestversion of NEI 03-01 that describes an approach that the. NRC staff, has found.acceptable.(U) reviewing, official--the licensee or, if applicable, CN/persons designated by their companyto be responsible for reviewing and evaluating all data collected about an individual,including potentially disqualifying information, in order to determine whether theindividual maybe authorized UAA or granted UA.(U) semi-structured interview--an interview with an individual applying for UAA or a personmaintaining UAA,. conducted. by a psychiatrist or a licensed, psychologist with. clinica[.experience as required by applicable state requirements, containing questionsdetermined appropriate by the interviewing psychiatrist or licensed psychologist whichvary the. focus and content of the. interview,, depending on the written assessment, theobservations of the interviewer, and the interviewee's responses to questions. Thesemi-structured interview may contain any other evaluative measure determinedappropriate by the psychiatrist or licensed psychologist.(U) tampering--deliberately damaging, disabling, or altering equipment necessary for safeshutdown or security equipment necessary for the protection of the facility in order todefeat their function and/or prevent them from operating..(U). target set--the combination of equipment or operator actions which, if all are preventedfrom performing their intended safety function or prevented from being accomplished,would likely result in significant core damage (e.g., non-incipient, non-localized fuelmelting, and/or core disruption) barring extraordinary action by plant operators. A targetRG 5.77, Page 15 OFFE'EIC'IAL US ION "LY S ECU"IT ~ELATfED' INFORMl:)liATl~iO'Nlset with respect to spent fuel sabotage is draining the spent fuel pool leaving the spentfuel uncovered for a period of time, allowing spent fuel heat up. and the associatedpotential for release of fission products.(U) unescorted access (UA)-- status granted to an individual after satisfactorily completing allregulatory requirements for UAA and FFDA, and the individual has completed plantaccess training; is subjected to a behavioral observation program; is placed in a randomdrug and alcohol testing program; and is provided, the physical means to gain UA to theprotected area.(U) unescorted access authorization (UAA)--status in the. access, authorization process, afterthe individual satisfactorily completes all required elements as specified in Section 6(including the. FFDA elements: consent, self-disclosure, suitability inquiry, drug andalcohol testing elements defined in 10 CER Part 26, being subject to a BOP and trainingin the FED K&A's),which were evaluated by a licensee reviewing official who then madea favorable determination, relative to the, individual's trustworthiness, reliability andfitness-for-duty.RG 5.77, Page16 SECURITY-RELATED 1NFORMATIOHI(U) REFERENCES(U) 1. 1 0 CFR Part 73, "Physical Protection of Plants and Materials," U.S. Nuclear RegulatoryCommission, Washington, DC.'(U) 2. NEI 03-0 1, "Nuclear Powver Plant Access Authorization Program," Nuclear Energy Institute,Washington, DC.(U) 3. 10 CFR Part 50, "Domestic Licensing of Production and Utilization Facilities," U.S. NuclearRegulatory Commission, Washington, DC.(U3) 4. 10 CFR Part 52, "Licenses, Ccrtifications, and Approvals for Nuclear Power Plants,"U.S. Nuclear Regulatory Commission, Washington, DC.(U) 5. EA-03-086, "Design-Basis Threat Order," U.S.. Nuclear Regulatory Commission, Washington,DC, April 29, 2003.(U:) 6. 10 CFR Part 26, "Fitness for Duty Programs," U.S. Nuclear Regulatory Commission,Washington, DC.(Ul) 7. Information Notice 2007-31, "US Food and Drug Administration Announcement Related toCertain Sleep Disorder Drugs," U.S. Nuclear: Regulatory. Commission, Washington, DC,November 13. 2007.2(U) 8. NEI 03-12, "Security Plan Template," Nuclear. Energy Institute, Washington, DC.(U) 9. SAND2007-559 I, "Nuclear Power Plant Security Assessment Technical Manual," SandiaNational Laboratories, Albuquerque, New Mexico, September 2007. -(U) 10. 71 FR 62664,."Power Reactor Security Requirements,". Federal Register, Volume 71,Number 207, pp. 62664-62874, Washington, DC, October 26, 2006.sAdd a reference for the Proposed and Final Rules.1 (U). All NRC rcgulations listed herein arc available electronically through the Elcectronic Reading Room on the. NRC'spublic Web site, at hrtp:I/A~vw.nre.gov/reading-rm/doc-collections/cfrI. .Copies are also available for inspectionor copying for a fcc from the NRC's Public Documcnt Room (PDR) at 11555 Rockville Pike, Rockville, MD;the mailing address is USNRC PDR, Washington, DC 20555; telephone (301) 415-4737 or (800) 397-4209;fax (301) 415-3548; and email PDR(~1nrc.gov.2 (U) All information notices listed herein were published by the NRC and are available electronically through theElectronic Reading Room on the NRC's public Web site, athtp:f/lwww.nrc. uov/readine-rm/doc-collections/cen-comm/info-notices/. Copies are also available for inspection orcopying for a fee from the NRC's Public Document Room (PDR) at 11555 Rockville Pike, Rockville, MD; the mailingaddress is USNRC PDR, Washington, DC 20555; telephone (301) 415-473.7 or (800) 397-4209; fax (301) 415-3548;anld email PDR(Tnrcegov.(U) All Federal Register notices listed herein were issued by the U.S. Nuclear Regulator5, Commission and areavailable for inspection or copying for a fee from the NRC's Public Document Room (PDR) at 11555. Roekville Pike,Rockvillc, MD; the mailing address is USNRC PDR. Washington, DC 20555; telephone (301) 415-4737 or (800) 397-4209; fax (301) 415-3548; and e-mail Many are also available electronically through the FederalRegister Main Page of the public GPOAccess Web site, which the U.S. Government Printing Office maintainsat RG 5.77, Page 17OFF,,.,,.,L U.....,,E.. ONL','--SECU RrT;-RELATED I N FO!,,rMATl" ........ION,,

(U5) BIBLIOGRAPHY(OUO-SRI). PERS-TR-94-001, "Assessment of Position Factors that Increase Vulnerability toEspionage," Department of Defense Personnel Security Research Center. Provides guidance, thatmay assist a licensee in determining which positions may be vulnerable to an insider threat basedon local conditions.RG 5.77, Page 18 OFFl'IC"IAL US ON", SE CUIR"I RLATED"'rl' INFORMA,,,1x1-TION(U). BIBLIOGRAPHY(OUO-SRI) PERS-TR-94-00 1, "Assessment of Position Factors that Increase Vulnerability toEspionage," Departmuent of Defense Personnel Security Research Center. Provides guidance thatmay assist a licensee in determining which positions may be vulnerable to an insider threat basedon local conditions.ADAMS. Accession No.:. ML09072 1034OFFICE: NSIR/DSP/RSRLBITL NSIRIDSPIRSRLB/BC NSIRIDSP/DDRS OGC.NAME: BSchnetzler DHuyck SMorris B JoneswI/comments wI/comments Subject toeditsDATE: 03/20/09 03/24/09 03/26/09 0411 4/09OFFICE: NSIRIDSO/ NSIR/DSPNAME: BWestreich RCorreia_______DATE: 05/30/09 06/ /09 ______________OFFICIAL RECORD COPYRG 5.77, Page 18OFFICIAL USE ONY-EU!T-EAE INFORrMATION