OA Weekly Highlights
for February 10 – 14, 2003
Office
of Safeguards and Security Evaluations (OA-10)
SRS
Comprehensive Inspection: Writing of
the draft inspection report has begun.
Due to the heightened security level, OA cancelled the scheduled
force-on-force performance test.
MC&A personnel are meeting with EM security staff concerning the
MC&A program at SRS.
ANL-E
Comprehensive Inspection: Preparation
of the data call and inspection plan is on going.
Headquarters
Security Officer (HSO) Activity: The
HSO is assessing which OA areas require key control to update the key control
inventory, if necessary. The updated
information will be forwarded to SO-20 by February 24, 2003.
CMPC
Special Reviews: The schedule of future
special reviews (to begin in April) has been forwarded to management. Action to update the special review plan and
procedure is ongoing.
CAT
Training: OA-10 is currently developing
an after-action report of the January 2003 Composite Adversary Team training at
Camp Pendleton, CA.
OA-10
personnel are supporting OA-30 with the headquarters emergency management
exercises.
OA-10 is
currently reviewing and developing comments on the draft DOE Order 471.A,
Incidents of Security Concern.
Office
of Cyber Security Evaluations (OA-20)
Cyber Security Evaluation of the
Savannah River Site (SRS): Internal and
external penetration testing has been completed. The inspection team is analyzing data and drafting sections of
the inspection report.
Perimeter Scanning Project:
OA-20 personnel have initiated a special study to map and identify
vulnerabilities in DOE computer networks exposed to potential attack from the
Internet. Vulnerability testing has
been completed for 24 DOE sites.
Testing is ongoing at several sites with discussions continuing with a
number of additional sites to coordinate testing activities. Summary reports will be prepared for each
site to summarize scanning results for site and program line management
beginning with the report for DOE Headquarters.
Unannounced Cyber Security Penetration Testing: OA-20 has developed a draft protocol for the
conduct of unannounced penetration testing of DOE computer systems. The protocol is undergoing internal office
review.
Cyber Security Inspection at the Argonne National Laboratory
– East (ANL-E): OA-20 has initiated
planning activities for the upcoming Safeguards and Security and Cyber Security
Inspection at ANL-E. A cyber security
team roster has been proposed and announcement memoranda have been
drafted.
Office
of Emergency Management Oversight (OA-30)
OA-30 and OA-50 are conducting an inspection of Sandia National Laboratories,
New Mexico. On-site data
collection was completed and the team completed the initial draft report in
preparation for on-site validation efforts.
OA-30 is planning
for an inspection of the Office of Secure Transportation (NA-14) emergency
management program. Conference calls
have been scheduled to ensure coordination of the data collection phase, which
has been scheduled. The final
inspection plan will be completed by February 24.
OA-30 is developing
an approach for a “Summary Report of Emergency Management Program Status.” Inspection data collected from 2000-2002 is
being reviewed and analyzed. The results
will provide the status of key sites since the OA 1999 follow-up report,
identify opportunities for improvement, and provide insight for future
inspection activities.
OA-30 and OA-50 will
be conducting an inspection of the East Tennessee Technology Park. Planning is in progress including a
scheduled scoping visit.
Office
of Environment, Safety and Health Evaluations (OA-50)
ETTP
Inspection: Activities are underway to
support the combined ES&H and emergency management at ETTP, including the
scheduled scoping visit.
Nevada
Test Site: The final corrective action
plan has been received and is under review.
Pantex Plant: A
corrective action plan has been requested.
Sandia National Laboratory, NM: The team completed onsite data gathering activities and returned
to Germantown to draft the report. The
team will return to the site for validation and closeout.
Y-12 National Security Complex: Planning and coordination activities continue. The team will assemble for planning on March
3.
Brookhaven
National Laboratory Re-accreditation:
Waiting for written confirmation of the re-accreditation from the AAAHC.
Lessons Learned Report:
The report summarizes trends and observations from ES&H reviews
since the formation of OA-50. Senior OA
management has reviewed the report and comments are being incorporated.
Environment, Safety and Health Appraisal Process Guide: As part of a continuing effort to enhance
the quality and consistency of ES&H oversight appraisals, OA-50 developed
an Environment, Safety and Health Appraisal Process Guide. When used in conjunction with the OA
Appraisal Process Protocols, the guide provides the necessary guidance for
conducting ES&H oversight appraisals.
Technical editing of the guide is ongoing.
Office
of Safeguards and Security Evaluations (OA-10)
LANL
Comprehensive Inspection: Completed
distribution of the final LANL inspection report.
Performed
an analysis of OA inspection results since 1994 at Los Alamos National
Laboratory and Lawrence Livermore National Laboratory.
Office
of Emergency Management Oversight (OA-30)
On January 31, OA issued the Evaluation Plan for Review of Headquarters
Emergency Response Plans. The review includes exercises that were
conducted this week. One exercise
scenario was a postulated security event and hazardous materials release at an
NNSA site and the second scenario was a security event at the Forrestal
facility. Additional exercises are
planned.
Office
of Environment, Safety and Health Evaluations (OA-50)
Sandia National Laboratories, California (SNL-CA)
Consultative Survey: The report was
forwarded to the Sandia Site Office.
The survey found SNL-CA to be in satisfactory compliance with 17 out of
20 AAAHC core and adjunct standards.
SNL-CA has officially applied to the AAAHC for a full accreditation
survey on or about May 2003.