ML21025A024

Change in Authorizing Official for Centrus Energy Corps Classified Information Systems/Networks

ML21025A024
Person / Time
Site:	07007003, 07007004
Issue date:	01/27/2021
From:	Kevin Ramsey NRC/NMSS/DFM/FFLB
To:	Wiehle K American Centrifuge Operating
Faraz Y
References
EPID L-2019-SPR-0009
Download: ML21025A024 (3)

Text

K. Wiehle UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 January 27, 2021 Ms. Kelly L. Wiehle, Regulatory Manager American Centrifuge Operating, LLC P.O. Box 628 Mail Stop 7560 3930 U.S. 23 South Piketon, Ohio 45661

SUBJECT:

CHANGE IN AUTHORIZING OFFICIAL FOR CENTRUS ENERGY CORP.S CLASSIFIED INFORMATION SYSTEMS/NETWORKS (EPID: L-2019-SPR-0009)

Dear Ms. Wiehle:

As you are aware, the U.S. Department of Energys Office of Nuclear Energy is no longer serving as the authorizing official (AO) for classified information systems/networks at your facilities that are under U.S. Nuclear Regulatory Commission (NRC) regulatory oversight. In accordance with the Federal Information Security Modernization Act of 2014, Public Law 113-283, and with the Department of Defense 5220.22-M, National Industry Security Program Operating Manual, Chapter 8 IS Security, Section 2 Assessment and Authorization, on January 15, 2021, the Executive Director of the NRC designated David Nelson, Chief Information Officer at the NRC, as the new AO for Centrus Energy Corp.s classified information systems/networks at facilities for which the NRC is the cognizant security agency (CSA).

Jonathan Feibus, NRC Chief Information Security Officer (CISO), with assistance from NRC staff in the Cybersecurity Branch of the Office of the Chief Information Officer and the Information Security Branch of the Office of Nuclear Security and Incident Response, have performed an assessment of the existing security controls, security plans, authorizations, inspection reports, and other supporting documentation for the classified information systems/networks at your facilities for which the NRC is the CSA. Based on this assessment, the NRC AO has approved an Interim Authority to Operate (IATO) for your Piketon facility and Headquarters office until November 1, 2021, based on the conditions provided below:

• All documentation and artifacts are updated and reviewed on a regular basis or as conditions warrant;

• All inspection reports, continuous monitoring reports, or other pertinent and related documentation is provided to the AO and Chief Information Security Officer (CISO) as they are produced or updated;

• Targeted checks of controls are to occur periodically or as otherwise required, and results communicated back to the AO and CISO;

• The AO and CISO are provided with quarterly system updates;

• All system changes must be reported to the AO and CISO prior to implementation for assessment and approval;

K. Wiehle 2

• All security related events relative to the systems are to be reported to the AO and CISO within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of discovery.

Please note that the AO has stipulated that a reaccreditation effort shall take place prior to the expiration of the IATO, or in the event of identified major system changes. Please also note that this IATO does not apply to the Technology and Manufacturing Center in Oak Ridge TN, since currently the NRC is not the CSA for that facility.

In accordance with Title 10 of the Code of Federal Regulations, Part 2.390 of the NRCs Agency Rules of Practice and Procedure, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room and the Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html. The sensitive conditions in the license will be withheld from the public.

If you have any questions regarding this matter, please contact me or Mr. Yawar Faraz by telephone at: 301-415-7220, or via email to: Yawar.Faraz@NRC.gov.

Sincerely, Kevin M. Digitally signed by Kevin M. Ramsey Ramsey Date: 2021.01.27 08:56:34 -05'00' Kevin Ramsey, Acting Chief Fuel Facility Licensing Branch Division of Fuel Management Office of Nuclear Material Safety and Safeguards Docket Nos. 07007003, 07007004 License Nos. SNM-7003, SNM-2011 cc: centrus_acp@listmgr.nrc.gov L. Cutlip, Vice President, Centrus A. Griffith, DOE NE-HQ S. Harlow, DOE NE-HQ M. McCune, DOE NE-HQ S. Greene, DOE NE-HQ J. Hutson, Contractor DOE NE-HQ Q. Nguyen, DOE SC-43.2

K. Wiehle 3

SUBJECT:

CHANGE IN AUTHORIZING OFFICIAL FOR CENTRUS ENERGY CORP.

CLASSIFIED INFORMATION SYSTEMS/NETWORKS (EPID: L-2019-SPR-0009)

DATED: January 27, 2021 DISTRIBUTION:

DFM r/f KEverly, NSIR ASapountzis, NSIR MBartlett, NMSS NStAmour, OGC TVukowinski, RII RWomack, RII NPitoniak, RII LClark, OGC AKock, NMSS CRegan, NMSS RWilliams, RII SAni, NMSS JRubenstone, NMSS LPitts, RII THarris, NSIR JLubinski, NMSS RLewis, NMSS LClark, OGC DNelson, OCIO SAtack, NSIR AMullins, OCIO GTuttle, NMSS CTeal, NSIR LSuggs, RII LDudes, RII JMunday, RII TPham, NMSS DMarcano, NMSS JTapp, NMSS GNalbandian, OCIO CWolf, OCA ASmith, NMSS JMunson, NMSS JHammelman, NMSS BPartlow, OCIO CPantalo, OCIO MMangefrida, OCIO JTrefethen, NMSS JFeibus, OCIO JDowns, NMSS DMcIntyre, OPA DTiktinsky, NMSS SFlanders, OCIO JWeil, OCA MDiaz, NMSS JZimmerman, NMSS KSturzebecher, NMSS ARivera, NSIR SLee, NSIR ADAMS Package Accession Nos.: ML21025A024 *via email OFFICE NMSS/DFM/FFLB* NMSS/DFM/FFLB* OGC/GCRPS/HLWFCNS

• NSIR/DSO/ISB NMSS/DFM/FFLB NAME YFaraz ELee NSt.Amour DParsons KRamsey DATE 01/25/2021 01/25/2021 01/26/2021 01/26/2021 01/27/2021 OFFICIAL RECORD COPY