Sorry, you need to enable JavaScript to visit this website.
U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Audit of the U.S. Nuclear Regulatory Commission’s Web-Based Licensing System

Report Information

Date Issued
Report Number
OIG-NRC-25-A-09
Report Type
Audit
Description
The audit objective was to determine if the Web-Based Licensing (WBL) System effectively manages the U.S. Nuclear Regulatory Commission’s (NRC) materials licensing and inspection information and provides for the security, availability, and integrity of the system data.  The OIG found that the WBL System’s inactivity controls interrupt users’ work processes; WBL users are unable to edit role-based licensing information in the Export/Import and Decommissioning, Uranium Recovery and Waste Programs modules; the WBL User Guide lacks quality information for using certain WBL modules; WBL users are generally unfamiliar with the change control process; several WBL enhancements do not work as intended; the licensing and inspection modules do not contain quality data; and, WBL System data is not readily available for the agency to use in other applications. The report contains 15 recommendations to increase the WBL System’s functionality, effectiveness, and users’ efficiency. 
Joint Report
No
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
View report on Oversight.gov

Recommendations

The OIG recommends that the Executive Director for Operations update the Web-Based Licensing System User Guide to incorporate guidance on how to use the new modules added to the WBL System, and describe how to use new enhancements to the system.

Agency Response Dated March 13, 2026: On February 26, 2026, the staff updated the WBL User Guide to incorporate instructions for the Export/Import and the Sealed Sources &amp; Devices (SS&amp;D) modules. Instructions for the remaining modules (e.g., Storage and Transportation Information Management System/Fuel Facilities Information Management System (STIMS/FFIMS), Division of Decommissioning, Uranium Recovery and Waste Programs (DUWP), General License Tracking System (GLTS)) are currently being developed for inclusion in the next WBL User Guide update, which will be issued by the target completion date. Target Completion Date: September 1, 2026<br />
OIG Analysis: The proposed actions meet the intent of the recommendation. The OIG will close the recommendation<br />
after verifying that the WBL User Guide incorporates guidance on how to use the new modules added to the WBL<br />
System and describes how to use the new enhancements to the system. This recommendation remains open and<br />
resolved.<br />
<br />
Agency Response Dated August 13, 2025: The WBL User Guide will be updated to include workflows and feature-specific instructions for newly added and enhanced system modules (e.g., STIMS/FFIMS, DUWP, GLTS, Export/Import). Points of contact (POCs) for each module will provide the input needed to ensure the guide is both comprehensive and accurate.<br />
Target Completion Date: July 1, 2026<br />
OIG Analysis: The proposed actions meet the intent of the recommendation. The OIG will close the recommendation<br />
after verifying that the WBL User Guide incorporates guidance on how to use the new modules added to the WBL<br />
System and describes how to use new enhancements to the system. This recommendation remains open and resolved.

The OIG recommends that the Executive Director for Operations establish a schedule to periodically review the Web-Based Licensing System User Guide and determine if it incorporates significant enhancements made on how to use the system.

Agency Response Dated March 13, 2026: A periodic review of the WBL User Guide has been implemented and is tracked as an ongoing activity in the non-casework module of WBL. NMSS divisions and module Points of Contact (POCs) are responsible for reviewing and updating WBL User Guide content on a scheduled basis. The Division of Materials Safety, Security, State, and Tribal Programs (MSST) coordinates the collection of updates from the Office of Nuclear Material Safety and Safeguards (NMSS) divisions and the Office of International Programs to ensure thorough and timely revisions. The WBL User Guide will be reviewed at least annually to ensure it remains current, and this will be tracked by NMSS. The staff’s actions on this recommendation are complete.<br />
OIG Analysis: The OIG verified that the agency established a schedule to periodically review the WBL System User Guide to determine if it incorporates significant enhancements on how to use the system. Therefore, this recommendation is<br />
closed.<br />
<br />
Agency Response Dated August 13, 2025: A recurring review schedule will be implemented for each module POC to ensure the WBL User Guide remains current with system enhancements. Office of Nuclear Material Safety and Safeguards (NMSS) divisions and module POCs will be responsible for reviewing and updating the User Guide content on a scheduled basis. The Division of Materials Safety, Security, State, and Tribal Programs will coordinate the collection of updates from NMSS divisions and the Office of International Programs to support thorough and timely revisions.<br />
Target Completion Date: January 2026 (recurring). <br />
<br />
OIG Analysis: The proposed actions meet the intent of the recommendation. The OIG will close the recommendation after verifying that the agency has established a schedule to periodically review the WBL System User Guide to determine if it incorporates significant enhancements on how to use the system. This recommendation remains open and resolved.

The OIG recommends that the Executive Director for Operations update the Web-Based Licensing System Change Control Procedure and related information resources to accurately reflect the current process and issue a memo to WBL users informing them of the updated process.

Agency Response Dated March 13, 2026: A draft WBL Change Control Procedure was posted to the WBL SharePoint site in September 2025. The staff is finalizing the draft procedure based on operational experience and will issue a memorandum to the WBL stakeholder groups by the target completion date. Users will be notified through periodic communications to ensure awareness of the updated process and other relevant information.<br />
Target Completion Date: May 29, 2026 <br />
OIG Analysis: The proposed actions meet the intent of the recommendation. The OIG will close the recommendation<br />
after verifying that the WBL System Change Control Procedure and related information sources have been updated to reflect the current process accurately and that WBL users have been informed of the updated process. This recommendation remains open and resolved.<br />
<br />
Agency Response Dated August 13, 2025: An updated WBL Change Control Procedure is currently under development and will reflect the current process for managing system changes. Once finalized, the updated procedure will be shared with users and posted to the WBL SharePoint site. Users will be notified through periodic communications to ensure awareness of the updated process and other relevant information.<br />
Target Completion Date: December 31, 2025<br />
OIG Analysis: The proposed actions meet the intent of the recommendation. The OIG will close the recommendation<br />
after verifying that the WBL System Change Control Procedure and related information sources have been updated to reflect the current process accurately and that WBL users have been informed of the updated process. This recommendation remains open and resolved.

The OIG recommends that the Executive Director for Operations clarify the role of a Web-Based Licensing System module point of contact and update the points of contact list for the Web-Based Licensing System Change Control Procedure.

Agency Response Dated March 13, 2026: Module POCs have been identified, and their roles were included and clarified in the draft WBL Change Control Procedure and on the WBL SharePoint site. Updated POC information will be included in the memorandum to the WBL stakeholder groups transmitting the final WBL change control procedure. This action will be completed by the target date. Target Completion Date: May 29, 2026<br />
OIG Analysis: The proposed actions meet the intent of the recommendation. The OIG will close the recommendation<br />
after clarifying the role of a Web-Based Licensing System module point of contact and verifying that the proper<br />
module points of contact have been updated and the information has been made available to WBL System users.<br />
This recommendation remains open and resolved.<br />
<br />
Agency Response Dated August 13, 2025: Module POCs have been identified, and their roles will be reflected in the WBL Change Control Procedure and WBL SharePoint site. Updated POC information will also be communicated to the relevant NMSS and Regional divisions. Target Completion Date: December 31, 2025<br />
OIG Analysis: The proposed actions meet the intent of the recommendation. The OIG will close the recommendation<br />
after clarifying the role of a Web-Based Licensing System module point of contact and verifying that the proper<br />
module points of contact have been updated and the information has been made available to WBL System users.<br />
This recommendation remains open and resolved.

The OIG recommends that the Executive Director for Operations prioritize and fix any current features within the Web-Based Licensing System that are not operating correctly.

Agency Response Dated March 13, 2026: Currently, the features of WBL are operating as intended. When issues with the system are identified, those that affect the functionality of the system are prioritized ahead of other changes. The staff reviews the list of change requests with the contractor on a weekly basis to determine any necessary adjustments in priority and to address newly identified issues. All current change requests are displayed in the WBL Backlog Dashboard, including those that do not impact the functionality of the features of WBL. The Integrated Source<br />
Management Portfolio team completes, on average, 110 change requests per year and completed 122 in CY 2025.<br />
Staff actions on this recommendation are complete.<br />
OIG Analysis: The OIG verified that the agency identified any current features that are not operating correctly, and prioritized change requests related to functionality in the WBL Backlog Dashboard. Therefore, this recommendation is closed.<br />
<br />
Agency Response Dated August 13, 2025: The WBL business and information technology (IT) teams use a structured process to identify, track, and resolve reported defects. All issues, including formatting inconsistencies such as spacing in license templates and functional problems, are recorded in a centralized backlog and prioritized based on their business needs. Interim workarounds are provided when appropriate until permanent solutions can be implemented. This process ensures that system issues are addressed systematically and that WBL functionality continues to improve.<br />
This recommendation is considered complete based on the ongoing use of this process and the resolution of identified issues to date. Completion Date: March 31, 2025<br />
OIG Analysis: The OIG acknowledges that the WBL System business and IT teams use a structured process to identify, track, and resolve reported defects, and those issues are prioritized and systematically addressed. However, the agency’s response does not address identifying any existing issues that may not currently be in the centralized backlog. The OIG will close the recommendation after verifying that the agency has made an effort to identify any current features that are not operating correctly. This recommendation remains open and resolved.