ML24036A119

Digital RIC Exhibit - the Baseline Security Significance Determination Process

ML24036A119
Person / Time
Issue date:	03/14/2024
From:	Brooks M NRC/NSIR/DSO/SOSB
To:
References
Download: ML24036A119 (1)

Text

U.S. Nuclear Regulatory Commission RIC 2024 Hybrid 36thAnnual Regulatory Information Conference

The Baseline Security Significance Determination Process (BSSDP):

Looking for Improvements in Security Issue Screening MARCH 12-14, 2024 Bethesda North Marriott Hotel and Conference Center Rockville, Maryland

1. nrcric2024 www.nrc.gov RIC 2024 Hybrid MARCH 12-14, 2024 U.S. Nuclear Regulatory Commission #nrcric2024 36thAnnual Regulatory Information Conference www.nrc.gov

What is the BSSDP?

• The BSSDP is aprocess used by the NRC to evaluate the significance of security findings at reactor sites.

• The BSSDP is publicly available and can be found on the NRC's website under IMC 0609, Appendix E, Part I.

Maury Brooks ADAPTING TO A Security Specialist Security Oversight and Support Branch Division of Security Operations CHANGING LANDSCAPE Office of Nuclear Security and Incident Response (301) 287-0790 maury.brooks@nrc.gov RIC 2024 Hybrid MARCH 12-14, 2024 U.S. Nuclear Regulatory Commission #nrcric2024 36th Annual Regulatory Information Conference www.nrc.gov

A History of Improvements

• The BSSDP was created in 2004 to assess findings associated with physical protection, contingency response, access authorization, and access control. Since then, the BSSDP has undergone several revisions to add or improve methods of assessing different types of security findings including:

• Material control and accountability (2008)

• Protection of safeguards information (2012)

• Protection ofunattended openings intersecting security boundaries (2015)

• Target sets (2018)

Maury Brooks ADAPTING TO A Security Specialist Security Oversight and Support Branch Division of Security Operations CHANGING LANDSCAPE Office of Nuclear Security and Incident Response (301) 287-0790 maury.brooks@nrc.gov RIC 2024 Hybrid MARCH 12-14, 2024 U.S. Nuclear Regulatory Commission #nrcric2024 36th Annual Regulatory Information Conference www.nrc.gov

Current Efforts to Improve

• In 2023,NRC staff began reviewing the BSSDP to identify any aspects of the tool that can be improved or further risk-informed.

• A working group (WG) of subject matter experts from various NRC offices is assembled and will take a phased approach to reviewing the BSSDP.

WG Phase I (Jan-June 2024) WG Phase II (TBD)

• Evaluate data collected on the

• If needed, the second phase of the current BSSDP (e.g., survey effort willdevelop changes to responses, finding reviews, etc.) enhance the BSSDP

• Identify areas for improvement and present options

Maury Brooks ADAPTING TO A Security Specialist Security Oversight and Support Branch Division of Security Operations CHANGING LANDSCAPE Office of Nuclear Security and Incident Response (301) 287-0790 maury.brooks@nrc.gov RIC 2024 Hybrid MARCH 12-14, 2024 U.S. Nuclear Regulatory Commission #nrcric2024 36th Annual Regulatory Information Conference www.nrc.gov Committed to Principles of Good Regulation

• The NRC will engage external stakeholders during the process to solicitfeedback.

• Any modifications to the BSSDP willensure that the toolcontinues to provide clear and reliable methods forscreening security findings,consistent with the NRC's Principles of Good Regulation.

• This effortis an example of the NRCsstrategic planto maintain and further risk-inform its regulatory framework using operating experience, lessons learned, external and internal assessments, and changes in the threat environment.

Maury Brooks ADAPTING TO A Security Specialist Security Oversight and Support Branch Division of Security Operations CHANGING LANDSCAPE Office of Nuclear Security and Incident Response (301) 287-0790 maury.brooks@nrc.gov