05000397/LER-2003-002

LER-2003-002,

Docket Number
Event date:	05-15-2003
Report date:	06-13-2003
Initial Reporting
3972003002R00 - NRC Website

DESCRIPTION OF EVENT

On May 15, 2003, with Columbia Generating Station (Columbia) shut down for a refueling outage, a vulnerability in a safeguards system was discovered that could have allowed unauthorized or undetected access to the Columbia protected area (ref: Event Report 39852). The vulnerability existed due to a Safeguards Information (SGI) container that was determined to be unlocked and uifttencialor—Cpafiod—ofTpproximAtely-24 hours:- The unlocked SGI-container allowed access to site-specific drawings, diagrams, and technical details regarding the physical security system that could facilitate access to the protected and vital areas.

Subsequent to discovery of the vulnerability, the contents were inventoried and fully accounted for. The SGI container is located in a room for which access is controlled with a keycard reader and there was no evidence of forced entry. Neither is there indication the vulnerable condition resulted in an actual unauthorized or undetected entry into the protected area nor has this event presented a challenge to the safe operation of Columbia.

This 30-day follow-up written report is submitted pursuant to 10 CFR 73.71(b)(2) in accordance with paragraph (a)(4) of that section. Regulatory Guide 5.62, revision 1, section 3.2 instructs licensees to use the Licensee Event Report form, NRC Form 366 and describes the report content that is sufficient for NRC analysis and evaluation. Because this event does not involve a security system failure or a threat related incident, only items 1 through 14 in section 3.2 of the Regulatory Guide are germane to this issue and are addressed below:

Date and Time of Event May -15,-2003-at 1315.-PDT.

Location of Actual or Threatened Event The SGI container that was open and unattended is in a plant records storage area in a building adjacent to Columbia's protected area and within the owner controlled area.

Plant Operating Phase Columbia Generating Station was shutdown for a refueling outage.

NRC FORM 366A U.S. NUCLEAR REGULATORY COMMISSION (1-2001) FACILITY NAME (1) DOCKET (2) LER NUMBER (6) PAGE (3) Safety Systems Threatened, directly or indirectly Because the vulnerability did not result in an actual unauthorized entry into the protected area, no safety systems were threatened.

Type of Security Force onsite Columbia Generating Station maintains a proprietary security force.

Number and type of personnel involved The personnel involved with the discovery and mitigation of the vulnerability were a records management clerk, distribution clerk, records management supervisor, and a safeguards information specialist.

Method of discovery of vulnerability A records management clerk observed the unlocked and unattended SGI container and reported the condition.

Procedural errors involved A records management clerk left the SGI container unlocked and unattended. The unlocked SGI container was a violation of security procedure SWP-SEC-02, "Protection of Safeguards Information.

Immediate aitiOns taken in iesponselo—dievulnerability Upon discovery of the vulnerability, the contents were inventoried, fully accounted for, and the SGI container secured. The security computer was queried to determine the scope of keycard access to the room during the time the SGI container was unlocked. Personnel that gained access to the room were either cleared for access to SGI or were escorted by SGI-cleared individuals. Local copiers were checked to determine usage during the time the SGI container was unlocked and unattended. This investigation revealed no copier usage during the period.

No local, State, or Federal law enforcement agencies were contacted regarding this condition.

Description of media interest or press release A press release was not issued regarding this condition and there has been no media interest.

Indication of previous similar events No indication of previous similar events that could have allowed unauthorized or undetected access to the Columbia Generating Station protected area due to an unsecured SGI container have been found.

Knowledgeable contact For questions or additional information the point of contact is Mr. Fred Schill at the Columbia Generating Station Licensing department, who may be reached by telephone at 509-377-2269.

26158 R1