Office of Safeguards and Security Evaluations
(OA-10)
Richland/Hanford and Pacific
Northwest National Laboratory Inspection:
Closeout activities were completed on June 12 with factual accuracy comments due June 25.
Sandia
National Laboratory-New Mexico Special Review:
Data collection activities are continuing in support of the special
review of SNL-NM security management practices. This review is being conducted following interest expressed by
Senator Grassley. Media Interest is
expected.
Composite Adversary Team
Training: Prospective attendees
continue to be confirmed and various logistical issues are being resolved in
preparation for the next CAT training.
Y-12 Safeguard and Security Inspection: Planning activities continue in support of
the Safeguard and Security Inspection of Y-12.
The OA-10 staff member detailed to
the Department of Homeland Security (DHS) is developing standard operating
procedures for the DOE desk at the DHS Emergency Operations Center.
The OA security officer is scheduled to
attend SSIMS training June 16-17.
Office of Cyber Security Evaluations
(OA-20)
Perimeter
Scanning Project: OA-20 personnel in
partnership with the Office of the Chief Information Officer are conducting a
special study (Perimeter Scanning Project) to map out and characterize DOE’s
network perimeter. This effort is being
undertaken to establish a baseline understanding of the magnitude and make-up
of DOE computer systems exposed to the Internet in order to improve the
Department’s protection posture.
Testing has been completed for 38 DOE sites. Testing is currently ongoing at several additional sites.
Special
Study of the Security of Wireless Computer Networking: OA-20 is preparing a special study report to
describe policy, technical issues, and improvement recommendations related to
the security of wireless computer networking devices within DOE. An initial draft of the special study is
undergoing management review.
Unannounced
Cyber Security Penetration Testing: OA is developing an unannounced cyber security penetration testing
capability to supplement routine announced inspections. OA-20 has established program documentation
and draft agreements that will serve as the basis for the unannounced testing
program. These documents are undergoing
management review. OA-20 anticipates
the commencement of unannounced testing this summer. Managers at several DOE organizations have volunteered as
participants.
Office of Emergency Management Oversight (OA-30)
Inspection
of the East Tennessee Technology Park:
OA-30 and OA-50 have completed the onsite phase of the inspection of
the East Tennessee Technology Park. The
initial draft report was provided to line management at the closeout on May
22. Final validation comments are due
June 13.
Inspection
of the Idaho National Engineering and Environmental Laboratory (INEEL): OA-30 and OA-50 continue planning for a
joint inspection of INEEL. INEEL
planning discussions are being held routinely with the Office of Nuclear
Energy, Science and Technology, the Idaho Operations Office, and with Bechtel
BWXT Idaho. The onsite scoping visit
was completed on June 3-5, 2003.
Stakeholder input was solicited from site labor organizations; the Snake
River Alliance; the Citizens Advisory Board; the Shoshone-Bannock Tribes; the
State of Idaho Bureau of Disaster Services; and the State of Idaho INEEL
Oversight Program.
Consideration
of Emergency Management Program Special Reviews: OA-30 is evaluating options to conduct inspections focused on
emergency management program elements, long-standing performance weakness, or
areas of special interest. OA-30 staff
is developing three alternatives for OA management consideration.
Inspection
Schedule: The scoping visit for the
combined OA-30 and OA-50 inspection at the Rocky Flats Environmental Technology
Site, scheduled for June 2003, has been cancelled. Pending determination on emergency management special review(s),
OA-30 is still planning to conduct inspections of the Office of Secure
Transportation (October/November 2003) and the Savannah Rive Site (scoping
October 2003).
Office of Environment, Safety and Health
Evaluations (OA-50)
Sandia National
Laboratories – New Mexico Inspection:
The final report was transmitted to the site on April 7. An approved corrective action plan (CAP) was
due on June 6th. NNSA is in the process
of delegating the authority for approval of CAPs to the Sandia Site Office and,
therefore, a request to extend the due date may be requested to allow time for
the delegation of authority to be processed.
An interim CAP on the emergency management findings was provided to OA
for review and comment. A sample CAP
was provided to the site in order to assist in their CAP development efforts.
Y-12 National
Security Complex Inspection: The final
report was distributed on May 9. An
approved corrective action plan is due on July 7.
East Tennessee
Technology Park Inspection: The draft
report for the combined OA-30 and OA-50 inspection was provided to the site on
May 22 for review and factual accuracy comments.
Suspect/Counterfeit
Items (S/CI) Special Study: The special
study is being conducted in two phases encompassing both the Department’s
headquarters and field elements of the S/CI program. The headquarters phase of the study continues. Onsite reviews at the Los Alamos National
Laboratory and Savannah River Site are currently in progress.
Nevada
Test Site Request for Inspection: The
Nevada Site Office manager submitted a request for an inspection of the
ES&H aspects site work for others program.
Activities have been initiated to scope this review.
Office of Safeguards and Security Evaluations
(OA-10)
Classified
Matter Protection and Control Special Reviews:
The Lawrence Livermore National Laboratory CMPC Special Review report
has been finalized and forwarded for approval.
Office of Cyber Security Evaluations
(OA-20)
Cyber
Security Inspection of the Hanford Site and Pacific Northwest National
Laboratory: OA-20 completed cyber
security inspections at the Hanford Site and the Pacific Northwest National
Laboratory. Draft inspection reports
have been transmitted to line management for review. Pursuant to requirements in DOE Order 470.2B, initial corrective
action plans are required to be submitted within 30 days of the issuance of the
final report.
Office of Environment, Safety and Health
Evaluations (OA-50)
Idaho
National Engineering and Environmental Laboratory Inspection: The scoping visit was conducted on June
3-5. This is a combined review with
OA-30 where OA-30 has the overall lead.
The AAAHC
survey of the Sandia National Laboratories-California took place May 29-30,
2003. In the concluding summation, the
surveyor had no major concerns. Survey
results have been forwarded to the AAAHC for committee review and the
declaration of accreditation is expected on or about July 11, 2003.