**NRC INSPECTION MANUAL**NSIR/DSO

INSPECTION MANUAL CHAPTER 2201 APPENDIX A

SECURITY BASELINE INSPECTION PROGRAM

Effective Date:  01/01/2021

2201-01	PURPOSE

This baseline inspection program is part of the U.S. Nuclear Regulatory Commission’s (NRC) security inspection program to assess the security performance of operating nuclear power reactor licensees subject to the requirements of Title 10 of the *Code of Federal Regulations* (10 CFR) Part 73, 10 CFR Part 26, and NRC imposed requirements, such as orders.

2201-02	OBJECTIVES

The objectives of the security baseline inspection program are:

a. To gather sufficient, factual inspection information to determine whether a licensee is meeting the objective of the security cornerstone, which is to provide assurance that the licensee’s security programs and protective strategy can protect against the design basis threat of radiological sabotage consistent with the general performance objective of 10 CFR 73.55(b); and that the licensee’s material control and accounting (MC&A) program includes processes for the control and accountability of special nuclear material to include the identification and notification of theft or loss consistent with 

10 CFR Part 74.

b.	To determine the licensee’s ability to identify, assess the significance of, and effectively correct security issues commensurate with the significance of the issue.

c.	To verify the accuracy and completeness of performance indicator (PI) data used in conjunction with inspection findings to assess the security performance of power reactor licensees.

d.	To provide a mechanism for the NRC to remain cognizant of security status and conditions.

e.	To identify those significant issues that may have generic applicability or cross-cutting applicability to the safe and secure operation of licensee facilities subject to the requirements of 10 CFR Part 73.

Issue Date:  04/22/21	1	2201 Appendix A

2201-03		APPLICABILITY

This inspection manual chapter (IMC) appendix is applicable to all operating commercial power reactor licensees that possess a license under 10 CFR Part 50 or 10 CFR Part 52.  The program requirements identified within this document apply to all NRC offices and personnel who are tasked with the inspection and oversight of security performance through the NRC’s Reactor Oversight Process (ROP) at nuclear power reactors licensed by the NRC.

2201-04	SCOPE

Security baseline inspections provide a sufficient examination of licensee activities in order to monitor licensee performance and to meet the objectives identified above and to assure that licensees’ security programs are meeting the objectives of the security cornerstone of the ROP.

2201-05		RESOURCES

The baseline inspection procedures (IPs) and their attachments define the effort and requirements necessary to obtain an adequate assessment of an inspectable area.  For resource planning purposes, each baseline IP attachment includes an estimate of the average inspection hours necessary to complete the procedure.  These estimates are not goals, standards, or limitations; rather, they are included to assist in planning resource allocations, and will be revised periodically, based on insights gained through the implementation of inspection activity.  It is expected that the actual hours required to complete an individual IP at a particular plant will vary from the estimate.  See IMC 2515, “Light-Water Reactor Inspection 

Program-Operations Phase,” and IMC 2201, “Security Inspection Program for Commercial Nuclear Power Reactors,” Section 08.02 for additional discussion.

The Office of Nuclear Security and Incident Response provide the regional offices with a band of expected effort (approximately +/- 10 percent) for each baseline IP per site as a process control.  Regional management is expected to review those situations when inspection effort falls outside of the control bands for possible programmatic insights and recommended changes to the program.

2201-06		PHILOSOPHY OF THE SECURITY BASELINE INSPECTION PROGRAM

The security baseline inspection program provides indication of licensee performance with respect to the implementation of security programs and MC&A processes.  The program was developed utilizing risk insights, lessons learned, and a risk-informed approach, where applicable, to determine a comprehensive list of areas to inspect within the security cornerstone of the ROP (see IMCs 2515, 2201, and 0305, “Operating Reactor Assessment Program,” for additional discussion).  The assessment of plant performance relies on information provided by PIs and inspections.

2201-07	DESCRIPTION OF SECURITY BASELINE INSPECTION PROGRAM

The security baseline inspection program is currently comprised of three parts:  inspection of inspectable areas, verification of PI data, and problem identification and resolution.

2201-08	ASSESSING INSPECTION FINDINGS

The baseline security significance determination process described in IMC 0609, Appendix E, “Security Significance Determination Process,” is used for determining the security significance of inspection findings and security-related events.  The enforcement process, as defined in the NRC Enforcement Manual, is also applicable to security-related findings.

The significance of security inspection findings will be described in inspection reports and their cover letters, as specified in IMC 0611, “Power Reactor Inspection Reports,” and Exhibit 4.  The findings (a redacted description) will also be entered into the Replacement Reactor Program System for tracking, and entered into the Plant Issues Matrix (PIM).  This redacted description will not become available to the public through the ROP public Web site, but will be available to internal NRC users.  The existence of a security finding will be displayed on the public Web site, but will only be characterized as either green or greater-than-green.  Inspectors should still provide the specific significance of a finding when making a PIM entry, but the public Web site will generically display all greater-than-green findings in blue, to withhold the specific significance.  In accordance with current agency policy, no other information or details related to security findings will be displayed on the public Web site.  Safeguards information (SGI) will not be entered into the PIM.  For findings where a full description would require disclosure of SGI, the issue should be described broadly in the PIM at the sensitive, unclassified, nonsafeguards information (SUNSI) security-related information level and not include SGI.

2201-09		DOCUMENTING INSPECTIONS

The purpose of reporting the results of inspections is to document the scope of inspections and any substantive findings in support of the assessment process.  Inspections will be documented in accordance with the guidance and requirements in IMC 0611.  Security designation requirements will be adhered to for all inspection reports, temporary instructions, orders, etc., that contain or have the potential to contain, SGI.  These documents shall be marked and controlled in accordance with NRC’s Management Directive, Volume 12, “Security.”  If the document does not contain SGI, but does contain security-related information about a specific site or event, then the document will be designated as Official Use Only - Security-Related Information in accordance with the agency’s SUNSI policy.  The NRC’s SUNSI policy can be found at the following Web address.  https://drupal.nrc.gov/sunsi

	2201-10	INSPECTION PLANNING

a.	Annual Inspection Planning.

See Attachment 2 to this appendix and IMCs 2201 and 2515 for additional guidance.

b.	Resident Inspector Utilization.

See IMCs 2201 and 2515 for additional information.

c.	Region-Based Inspection Planning.

See IMCs 2201and 2515 for additional information.

d.	Level of effort.

See IMCs 2201 and 2515 for additional information.

e.	Adjustments.

See IMCs 2201 and 2515 for additional information.

f.	Completion status.

See IMCs 2201and 2515 for additional information.

END

Attachments:

	1.	Inspectable Area Table

	2.	Resource Estimate Table

	3.	Revision History for IMC 2201, Appendix A 

Issue Date:  04/22/21	4	2201 Appendix A

ATTACHMENT 1

INSPECTABLE AREAS WITHIN THE SECURITY CORNERSTONE

The baseline inspection program requires the inspectable areas below be reviewed at each NRC-licensed operating power reactor site.  The inspectable areas verify aspects of key attributes of the security cornerstone in the safeguards strategic performance area.

Note 1:	Temporary instructions will be utilized, as required, to supplant and/or augment the baseline inspection program.

**	This inspectable area attachment has not been developed.

Issue Date:  04/22//21	Att1-1	2201 Appendix A 

ATTACHMENT 2

BASELINE INSPECTION PROCEDURES AND ESTIMATED RESOURCES

Issue Date:  04/22/21	Att2-1	2201 Appendix A 

Security Cornerstone Baseline Inspection-Annualized Grand Total4 278 hours

1.	Inspection budget funded by NSIR.

2.	A = Annual, B = Biennial, T = Triennial, Q = Quadrennial, AN = As Needed.  See 

		IMC 2201 for definitions.

3.	Direct inspection effort (hours), based on conducting the nominal range of inspection requirements within the inspectable area.

4.	Total does not include resident inspector plant status activities that are not considered direct inspection effort.  Inspection budget allocation for these inspections will be funded by the Office of Nuclear Reactor Regulation. 

5. 	The annualized estimated resource for IP 92707 will utilize resources allocated for IP 71130.03.  IP 92707 Inspections will only be conducted if IP 71130.03 cannot be performed.  In some cases, due to changing site conditions, it may be necessary to implement IP 92707 to replace the exercise week in IP 71130.03.  

Issue Date:  04/22/21	Att2-2	2201 Appendix A 

ATTACHMENT 3 - Revision History for IMC 2201, Appendix A

Issue Date:  04/22/21	Att3-2	2201 Appendix A