Audit of NRC’s Protection of Safeguards Information (SGI)
Report Information
Recommendations
Develop a structured reporting process that includes:
One point of contact to receive response of all Safeguards Information (SGI) releases; A numbering system to track the number of releases reported in a consistent manner; A system to report information on releases from the central point of contact to the responsible program offices; and A system to trend releases and to make any needed programmatic changes.
Update the affected Management Directives (MD) 3.4, 7.4, 12.1, 12.5, and 12.7 to provide consistent guidance on the new reporting structure outlined in recommendation 1.
Develop and implement interim guidance to communicate the structured reporting process to U.S. Nuclear Regulatory Commission (NRC) staff.
Update the annual online information security awareness training to reflect the reporting requirements for SGI releases.
Update the annual online information security awareness training to reflect the reporting requirements for SGI releases.