Office of Safeguards and Security Evaluations
(OA-10)
Sandia
National Laboratory – New Mexico Special Review: Data collection activities continue with a focus on security
management at SNL-NM. This review is
being conducted following interest expressed by Senator Grassley. Media Interest is expected.
Composite Adversary Team
Training: Attendees have been confirmed
and various logistical issues have been resolved in preparation for the next
scheduled CAT training.
The OA-10 staff member detailed to
the Department of Homeland Security (DHS) is developing standard operating
procedures for the DOE desk at the DHS Emergency Operations Center.
Classified
Matter Protection and Control Special Reviews:
The Lawrence Livermore National Laboratory CMPC Special Review report
was finalized in preparation for management approval.
Office of Cyber Security Evaluations
(OA-20)
Perimeter
Scanning Project: OA-20 personnel in
partnership with the Office of the Chief Information Officer are conducting a
special study (Perimeter Scanning Project) to map out and characterize DOE’s
network perimeter. This effort is being
undertaken to establish a baseline understanding of the magnitude and make-up
of DOE computer systems exposed to the Internet in order to improve the
Department’s protection posture.
Testing has been completed for 38 DOE sites. Testing is currently ongoing at several additional sites.
Special
Study of the Security of Wireless Computer Networking: OA-20 is preparing a special study report to
describe policy, technical issues, and recommended improvements related to the
security of wireless computer networking devices within DOE. An initial draft of the special study is
undergoing management review.
Unannounced
Cyber Security Penetration Testing: OA is developing an unannounced cyber security penetration testing
capability to supplement routine announced inspections. Program documentation and draft agreements
have been established to serve as the basis for the unannounced penetration
testing program. These documents are
undergoing management review. OA-20
anticipates the commencement of unannounced testing during this summer. Managers at several DOE organizations have
volunteered as participants.
Office of Emergency Management Oversight (OA-30)
Inspection
of the East Tennessee Technology Park:
OA-30 and OA-50 have completed the onsite phase of the inspection of
the East Tennessee Technology Park. The
initial draft report was provided to line management at the closeout on May 22
and final validation comments were received June 13.
Inspection
of the Idaho National Engineering and Environmental Laboratory (INEEL): OA-30 and OA-50 continue planning for a
joint inspection of INEEL. INEEL
planning and inspection scoping discussions are being held routinely with the
Office of Nuclear Energy, Science and Technology, the Idaho Operations Office,
and with Bechtel BWXT Idaho. The onsite
scoping visit was completed on June 3-5.
Stakeholder input was solicited from site labor organizations, the Snake
River Alliance, the Citizens Advisory Board, the Shoshone-Bannock Tribes, the
State of Idaho Bureau of Disaster Services, and the State of Idaho INEEL
Oversight Program. A site visit, by three
members of OA-30, is planned to finalize tabletop performance test packages.
Consideration
of Emergency Management Program Special Reviews: OA-30 is evaluating options to conduct inspections focused on
emergency management program elements, long-standing performance weakness, or
areas of special interest. OA-30 staff
is developing three alternatives for OA management consideration.
Inspection
Schedule: The scoping visit for the
combined OA-30 and OA-50 inspection at the Rocky Flats Environmental Technology
Site, scheduled for June 2003, has been cancelled. Pending determination on the emergency management special
review(s) to be conducted, OA-30 is still planning to conduct inspections of
the Office of Secure Transportation and the Savannah Rive Site.
Office of Environment, Safety and Health
Evaluations (OA-50)
Sandia National
Laboratories – New Mexico Inspection:
The final report was transmitted to the site on April 7. NNSA has delegated the authority for
approval of Sandia Site Office Corrective Action Plans to the Sandia Site
Office. An approved corrective action
plan was transmitted to OA on June 11 and is currently being reviewed.
Y-12 National
Security Complex Inspection: The final
report was distributed on May 9. An
approved corrective action plan is due on July 7.
East Tennessee
Technology Park Inspection: The draft
report was provided to the site on May 22 for a 10-day review period to
provide written factual accuracy comments.
The site comments have been received and are under review and
consideration prior to issuance of the final report.
Suspect/Counterfeit
Items (S/CI) Special Study: The special
study is being conducted in two phases encompassing both the Department’s
headquarters and field elements of the S/CI program. The headquarters phase of the study continues. Onsite reviews at the Los Alamos National
Laboratory and Savannah River Site were completed with the next onsite reviews
scheduled at the Kansas City Plant and Hanford site. A representative of the DNFSB was briefed on the status of
actions.
Nevada
Test Site Request for Inspection: The
Nevada Site Office manager submitted a request for an inspection of the
ES&H aspects site work for others program.
Activities have been initiated to scope this review.
Office of Safeguards and Security Evaluations
(OA-10)
The OA security officer attended SSIMS
training June 16-17.
OA-10 staff met with NA-12, to discuss
an inventory study and materials verification to be conducted by NA-12.
Office of Cyber Security Evaluations
(OA-20)
Cyber
Security Inspection of the Hanford Site and Pacific Northwest National
Laboratory: OA-20 completed cyber
security inspections at the Hanford Site and the Pacific Northwest National
Laboratory. Draft inspection reports
have been transmitted to line management for review. Pursuant to requirements in DOE Order 470.2B, initial corrective
action plans are required to be submitted within 30 days of the issuance of the
final report.