ML24074A367

Cover Letter - Approval of Gle Pcsp to Support New Hq Building

ML24074A367
Person / Time
Site:	07007033
Issue date:	05/09/2024
From:	Matt Bartlett NRC/NMSS/DFM/FFLB
To:	Jenny P Global Laser Enrichment
Shared Package
ML24074A366	List: ML24074A367 ML24074A369
References
EPID L-2023-SPR-0011
Download: ML24074A367 (1)

Text

OFFICIAL USE ONLY SECURITY-RELATED INFORMATION-

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001

May 9, 2024 Pat Jenny, Licensing Manager Regulatory Affairs Global Laser Enrichment 3901 Castle Hayne Road Wilmington, NC 28402

SUBJECT:

APPROVAL OF UPDATES TO THE GLOBAL LASER ENRICHMENT LLC PROGRAM CYBER-SECURITY PLAN TO SUPPORT THE NEW HEADQUARTERS BUILDING (ENTERPRISE PROJECT IDENTIFICATION NUMBER L-2023-SPR-0011)

Dear Pat Jenny:

The U.S. Nuclear Regulatory Commission (NRC) staff received the Global Laser Enrichment LLC. (GLE) request via letter dated September 21, 2023 (Agencywide Documents Access and Management System [ADAMS] Accession No. ML23283A247) to approve an updated Program Cyber Security Plan (PCSP) to add a classified network at the new headquarters (HQ) building. GLEs classified network, the Engineering and Industrial Control System, is currently operating under an Interim Authority to Operate approved through September 30, 2024 (ML23256A233) and is subject to renewal. In parallel with this review, the NRC staff is also reviewing the Standard Practice Procedures Plan update and Transportation Security Plan for a facility clearance for the new HQ building (see ML24037A127).

Requests for additional information (RAIs) were sent by the NRC staff on November 14, 2023 (ML23310A139). GLE provided an updated PCSP on November 13, 2023 (ML23335A135),

which was prior to issuance of the final RAIs. Draft RAIs were shared with GLE in October 2023, which informed their updated submittal. The NRC staff held several clarification calls with GLE to ensure mutual understanding of the draft RAIs and align on draft responses.

The PCSP security evaluation report (SER) is provided in Enclosure 1. This includes an environmental assessment of the plan updates, consistent with the requirements in Title 10 of the Code of Federal Regulations (10 CFR) Part 51, Environmental Protection Regulations for Domestic Licensing and Related Regulatory Functions. The PCSP for the new HQ building does not fall within any of the categories of actions eligible for categorical exclusion from an environmental assessment provided in 10 CFR 51.22. Therefore, the NRC staff developed a simple environmental assessment resulting in a finding of no significant impact as documented in Enclosure 2, which was published as a notice in the Federal Register (FR) on May 9, 2024 (89 FR 39662).

The enclosure 1 transmitted herewith contains security related information. When separated from enclosure 1, this letter and enclosure 2 are decontrolled.

OFFICIAL USE ONLY SECURITY-RELATED INFORMATION-

- OFFICIAL USE ONLY SECURITY-RELATED INFORMATION P.Jenny 2

The NRC staff determined that the revisions include both substantive and non-substantive changes, which are adequately described and justified and are consistent with the applicable guidance in CNSSI No. 1253, CNSSP No. 21, CNSSAM TEMPEST 1-13, NIST SP 800-18, NIST SP 800-37, and NIST SP 800-53. The NRC staff finds that the updates to the PCSP meet the relevant requirements of 10 CFR 95.19 and 95.49 and provide reasonable assurance that GLE will adequately protect classified information. Therefore, the NRC staff finds the updated PCSP acceptable. Based on the RAI responses, site visit, technical discussions and review of the revised GLE submittals, as documented further in the non-public Enclosure 1, the NRC staff approves the GLE PCSP GLEP-00015R dated November 13, 2023 (ML23335A135).

The existing interim authorization to operate allows the installation, configuration, and testing of the classified network systems; however, the NRC staff must successfully complete the operational readiness review of the GLE HQ facility, and GLE must obtain a new authorization to operate the classified network from the Authorizing Official for use of their classified networks at the GLE HQ building.

The NRC staff estimates that this action required approximately 60 hours6.944444e-4 days <br />0.0167 hours <br />9.920635e-5 weeks <br />2.283e-5 months <br /> of review, which corresponds to about $18,000.00 ($300.00/hour). These hours were charged to the following Enterprise Project Identification Numbers (EPID) 000225/07007033/L-2023-SPR-0011, "GLE PCSP for New Headquarters and L-2021-LLL-0019, GLE Classified Network Reaccreditation.

The first EPID will be closed once this review has been completed and the second EPID will remain open to support future reviews of the classified network.

In accordance with Title 10 of the Code of Federal Regulations, Part 2 Agency Rules of Practice and Procedure, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room (PDR) or from the Publicly Available Records component of the NRCs ADAMS. The ADAMS database is accessible from the NRC website at http://www.nrc.gov/reading-rm/adams.html. The PDR is open by appointment. To make an appointment to visit the PDR, please send an email to PDR.Resource@nrc.gov or call 1-800-397-4209 or 301-415-4737, between 8 a.m. and 4 p.m. eastern time (ET), Monday through Friday, except Federal holidays.

- OFFICIAL USE ONLY SECURITY-RELATED INFORMATION

- OFFICIAL USE ONLY SECURITY-RELATED INFORMATION P.Jenny 3

If you have any questions regarding this communication, please contact me at 301-415-7154, or via email to Matthew.Bartlett@nrc.gov.

Sincerely,

Signed by Bartlett, Matthew on 05/09/24

Matthew Bartlett, Senior Project Manager Fuel Facility Licensing Branch Division of Fuel Management Office of Nuclear Material Safety and Safeguards

Docket No. 07007033

Enclosures:

1.SER for GLE PCSP 2.Federal Register Notice of EA/FONSI

cc: gle@listmgr.nrc.gov

- OFFICIAL USE ONLY SECURITY-RELATED INFORMATION

ML24074A366; Ltr ML24074A367 OFFICE NMSS NMSS/DFM/FFLB NAME JRudd JR MBartlett MB DATE Mar 14, 2024 Mar 15, 2024 OFFICE OGC/LRAA/RASFP NSIR/DSO NAME AValentine Av Tlnverso BYip for BY DATE Apr9,2024 Apr12,2024 OFFICE NMSS/DFM/FFLB* NMSS/DFM/FFLB NAME Slav SL MBartlett MB DATE May 1, 2024 May 9, 2024 NMSS/DFM/FFLB JGoodridge Mar 18, 2024 OCIO/GEMSD JFeibus Apr15,2024