Office
of Safeguards and Security Evaluations (OA-10)
OTS/AL
Comprehensive Inspection: Preparations
for the planning meeting have been completed, and the FOF test director and
deputy test director have completed the final preparations for associated
performance tests.
CMPC
Special Reviews: The Headquarters and
SNL-NM draft reports have been reviewed by OA management and by site personnel
for factual accuracy. The final draft
report was sent out to the appropriate POCs for the 10-day comment period. The suspense date for OA to receive these
comments is September 6. Preparation
and coordination for the LLNL review is ongoing.
ANL-W
Comprehensive Inspection (planning September 30-October 4, data collection
October 21-November 1): The team
resource list was finalized, hotel accommodations are in the contract phase,
and work has begun on the Team memo and the computer security support memo.
Review
and comments for draft DOE O 142.X, Classified Visits and Travel Involving
Foreign Nationals Program, is ongoing.
The suspense date for OA-10 to provide comments to the front office is
September 9.
Deployment
of additional work stations and relocation of the servers for the OA classified
LAN is scheduled to commence once the system’s engineer is onboard to review
system architecture and develop system security and test documentation.
Coordination
between OA-10 and AL concerning the final Pantex CAP has resulted in a
commitment from AL to submit revised final plans by August 30.
MC&A
Topic Initiatives: The MC&A team
has also developed two tabletop exercises to be used during the ANL-W
inspection.
Updated
information on the status of corrective actions has been provided so that the
CAP Status Book can be revised by August 30.
Action
to modify the OA-10/Eagle Research-developed BATLE neutralization computer code
continues.
Office of Cyber Security and
Special Reviews (OA-20)
The inspection of
the Albuquerque Operations Office/Office of Transportation Safeguards cyber
security program has commenced.
Internal performance testing has been completed. Many of the programmatic interviews have
been conducted. Team members have begun
preparing preliminary inspection results.
Planning activities
to support an evaluation of the Chicago Operations Office cyber security
program have been initiated. This
evaluation is being performed as part of the combined OA-10/20 evaluation of
Argonne National Laboratory - West. A
performance test agreement between OA and the Chicago Operations Office has
been developed.
A special study
(Perimeter Scanning Project) was initiated to map and identify vulnerabilities
in DOE computer networks exposed to potential attack from the Internet. A project team has been formed. Initial tasks include development of a
project plan, creation of a database to store scanning data, and the
identification of the scope of DOE computer networks through both internal and
external sources. A pilot test of
scanning tools and methodologies will be performed in conjunction with the
ANL-W inspection.
Office
of Emergency Management Oversight (OA-30)
OA-30 and OA-50 continue to plan for
the combined review at the Nevada Test Site.
OA-30 is in the initial stages of planning for an evaluation of the Office of
Transportation Safeguards corrective action for emergency response to address
the Judgment of Need from the Accident Investigation Report, dated June 1999,
of Special Agent Fatality at Southeast Courier Section. As part of the Type A investigation, OA-30
is specifically tasked to schedule an evaluation of the corrective action taken
within 90 days of line management verification.
OA-30 and OA-50
continue to plan for the combined review at Pantex. Weekly conference calls are occurring to coordinate the upcoming
review.
OA-30 and OA-50 are in the initial stages of planning for an evaluation of the Sandia National
Laboratories, New Mexico.
Office
of Environment, Safety and Health Evaluations (OA-50)
OA-50 staff will revise the report that analyzes independent
environmental protection program assessments that have been conducted at DOE
facilities over the past several years.
Comments on the revised DOE Order 470.2B, “Independent Oversight and
Performance Assurance Program” were received from the FMC. Meetings are being scheduled with various
organizations to seek final resolution.
The Corrective Action Plan (CAP) for the Hanford
(PFR specific) safety management inspection was disapproved by EM-1 in a
memorandum dated August 19, 2002. The
CAP is to be revised and resubmitted within 30 days of the aforementioned
memorandum.
A final corrective action plan for the ANL-East safety and emergency
management inspection has been requested.
The final corrective action plan is due on August 27.
The final report of the safety and emergency
management inspection at LLNL was issued on August 23, 2002. The interim corrective action plan for the
LLNL safety and emergency management inspection was received and is under
review.
Team planning for the NTS safety and emergency
management inspection will begin on September 3, 2002. The team will begin onsite inspection
activities on September 9, 2002.
Coordination of the upcoming safety and emergency management inspection
at Pantex continues.
Report comments and a preliminary CAP for the WIPP safety and emergency
management inspection are due to OA by September 3, 2002.
OA has requested an overall schedule of activities and copies of
completed reports regarding the status of line actions taken to address the
DNFSB concerns on the effectiveness of ISM for BJC activities at ORO. Many of the documents have been recovered,
but an overall schedule is yet to be provided.
A follow-up meeting will be scheduled upon receipt of all of the
requested documents.
Office
of Safeguards and Security Evaluations (OA-10)
Special
Review memos for the HQ and SNL draft reports was approved by management and
dispatched.
Office of Cyber Security and
Special Reviews (OA-20)
OA-20 staff
completed a performance test of analytical tools for use in the Perimeter
Scanning Project. The test provided
information on the optimal configuration of these tools to allow OA to
effectively scan DOE computer systems accessible from the Internet.
Development of the
Government Information Security Reform Act (GISRA) report for DOE’s classified
cyber security has been completed.
Comments from DOE Program and Field Office reviewers have been received
and addressed. A distribution
memorandum is being prepared for OA-1 signature.
OA-20 has completed
the development of the SecureNet report.
Comments received from the Albuquerque Operations Office have been
resolved. A distribution memorandum is
being prepared for OA-1 signature.
Office
of Emergency Management Oversight (OA-30)
Planning
for emergency management performance tests for the upcoming review at the
Nevada Test Site was conducted August 26-29.
A scoping visit by
OA-30 and OA-50 to Pantex was completed the week of August 26-30.
Office
of Environment, Safety and Health Evaluations (OA-50)
The scoping visit for the safety
and emergency management inspection at the Pantex Plant was completed on August
29, 2002.