Weekly Highlights for June 2 – 6, 2003
Office of Safeguards and Security Evaluations
(OA-10)
Richland/Hanford and Pacific
Northwest National Laboratory inspection activities: Final on-site data collection and out briefing will be conducted
as scheduled.
Classified
Matter Protection and Control Special Reviews:
Comments were received this week on the draft results for the Lawrence
Livermore National Laboratory CMPC Special Review. Comments will be incorporated and a letter will be drafted for
management approval next week.
Sandia
National Laboratory-New Mexico Special Review:
Data collection activities are on-going this week in support of the
special review of SNL-NM security management practices. Activities included document reviews and
interviews. The next on-site data
collection phase will be conducted as scheduled. This review is being conducted following interest expressed by
Senator Grassley.
Composite Adversary Team
training: Prospective attendees are
being confirmed and various logistical issues are being resolved in preparation
for the next CAT training.
Y-12 Safeguard and Security
Inspection: Planning activities have
begun for the Safeguard and Security Inspection of Y-12 including preparation
of a draft resource list. A scoping
visit for this inspection has been scheduled.
The OA-10 staff member detailed to
the Department of Homeland Security (DHS) is developing standard operating
procedures for the DOE desk at the DHS Emergency Operations Center.
Office of Cyber Security Evaluations
(OA-20)
Perimeter
Scanning Project: OA-20, in partnership
with the Office of the Chief Information Officer, is conducting a special study
(Perimeter Scanning Project) to map out and characterize DOE’s network
perimeter. This effort is being
undertaken to establish a baseline understanding of the magnitude and make-up
of DOE computer systems exposed to the Internet in order to improve the
Department’s protection posture.
Testing has been completed for 38 DOE sites. Testing is currently ongoing at several additional sites.
Cyber
Security Inspection of the Hanford Site and Pacific Northwest National
Laboratory: OA-20 is conducting cyber
security inspections at the Hanford Site and the Pacific Northwest National
Laboratory. Data collection activities
have been completed. Draft inspection
reports are undergoing management review.
This is part of a combined Safeguards and Security and Cyber Security
Inspection.
Special
Study of the Security of Wireless Computer Networking: OA-20 is preparing a special study report to
describe policy, technical issues, and improvement recommendations as they
relate to the security of wireless computer networking devices within DOE. An initial draft of the special study is
undergoing management review.
Unannounced
Cyber Security Penetration Testing: OA
is developing an unannounced cyber security penetration testing capability to
supplement routine announced inspections.
OA-20 has established program documentation and draft agreements that
will serve as the basis for the unannounced penetration testing program. These documents are undergoing management
review. OA-20 anticipates the commencement
of unannounced testing during this summer.
Managers at several DOE organizations have volunteered as
participants.
Office of Emergency Management Oversight (OA-30)
Inspection
of the East Tennessee Technology Park:
OA-30 and OA-50 have completed the onsite phase of the inspection of
the East Tennessee Technology Park. The
initial draft report was provided to line management at the closeout on May
22. Final validation comments are due
June 13.
Combined
Inspection of the Idaho National Engineering and Environmental Laboratory
(INEEL): OA-30 and OA-50 continue
planning for a combined inspection of INEEL.
INEEL planning and inspection scoping discussions are being held
routinely with the Office of Nuclear Energy, Science and Technology, the Idaho
Operations Office, and with Bechtel BWXT Idaho. The onsite scoping visit was completed from June 3-5, 2003. Stakeholder input was solicited from site
labor organizations; the Snake River Alliance; the Citizens Advisory Board; the
Shoshone-Bannock Tribes; and the State of Idaho INEEL Oversight Program.
Consideration
of Emergency Management Program Special Reviews: OA-30 is evaluating options to conduct inspections focused on
emergency management program elements, long-standing performance weakness, or
areas of special interest.
Inspection
Schedule: OA has cancelled the scoping
visit for the combined emergency management and ES&H inspection at the
Rocky Flats Site and is re-evaluating when it might be rescheduled. If an inspection is conducted at Rocky Flats
in 2003, it will be an ES&H inspection only. Pending determination on emergency management special review(s),
OA-30 is still planning to conduct the scheduled inspections of the Office of
Secure Transportation and Savannah River Site.
Office of Environment, Safety and Health
Evaluations (OA-50)
Sandia National
Laboratories – New Mexico Inspection:
The final report was transmitted to the site on April 7. An approved corrective action plan (CAP) is
due on June 6th. An interim CAP on the
emergency management findings was provided to OA for review and comment. A sample CAP was provided to the site in
order to assist in their CAP development efforts.
Y-12 National
Security Complex Inspection: The final
report was distributed on May 9. An
approved corrective action plan is due on July 7th.
East Tennessee
Technology Park Inspection: The draft
report was provided to the site on May 22 for a 10-day review period to
provide written factual accuracy comments.
This was a combined review with OA-30 where OA-30 has the overall lead.
Idaho National
Engineering and Environmental Laboratory Inspection: The scoping visit was conducted on June 3-5. This is a combined review with OA-30 where
OA-30 has the overall lead.
Suspect/Counterfeit
Items (S/CI) Special Study: The special
study will be conducted in two phases encompassing both the Department’s
headquarters and field elements of the S/CI program. The headquarters phase of the study continues. Planning continues for the field element
phase with the first onsite reviews being conducted at Los Alamos National
Laboratory and Savannah River Site.
Nevada
Test Site Request for Inspection: The
Nevada Site Office manager submitted a request for an inspection of the site
work for others program. The request is
under review.
Office of Safeguards and Security Evaluations
(OA-10)
The ANL-W final corrective plan was
reviewed and a response was sent.
Office of Emergency Management Oversight (OA-30)
Emergency
Management Oversight Appraisal Process Guide:
OA-30 has updated the Emergency Management Oversight Appraisal Process
Guide. The March 2003 edition reflects
the requirements of DOE Order 470.2B and establishes an inspection records
management process. The guide is
available on the OA website.
Office of Environment, Safety and Health
Evaluations (OA-50)
IG
Request for Contacts: Site contact
information was provided to the IG for 15 findings contained in the Corrective
Action Tracking System database in response to a request in support of their
review activities.