Document: 10 CFR Part 73
Document ID: 4a082a11-230f-414b-9764-e21be2ad963b
Document Type: cfr
Title: Cyber security event notifications.
Source: 10 CFR Part 73
Source URL: https://www.ecfr.gov/current/title-10/part-73/section-73.77
Revision Date: 
Chapter: 
Section ID: 73.77
CFR Part: 73
CFR Title: 10

Content:
c notifications must contact the NRC Headquarters Operations Center at the commercial numbers specified in appendix A to this part and request a transfer to a secure telephone. ( i ) If the licensee's secure communications capability is unavailable (e.g., due to the nature of the security event), the licensee must provide as much information to the NRC as is required by this section, without revealing or discussing any Safeguards Information and/or Classified Information, in order to meet the timeliness requirements of this section. The licensee must also indicate to the NRC that its secure communications capability is unavailable. ( ii ) Licensees using a non-secure communications capability may be directed by the NRC Emergency Response management to provide classified information to the NRC over the non-secure system, due to the significance of the ongoing security event. In such circumstances, the licensee must document this direction and any information provided to the NRC over a non-secure communications capability in the written security follow-up report required in accordance with paragraph (d) of this section. ( 4 ) For events reported under paragraph (a)(1) of this section, the NRC may request that the licensee maintain an open and continuous communication channel with the NRC Headquarters Operations Center. ( 5 ) Licensees desiring to retract a previous security event report that has been determined to not meet the threshold of a reportable event must telephonically notify the NRC Headquarters Operations Center and indicate the report being retracted and basis for the retraction. ( 6 ) Declaration of emergencies. Notifications made to the NRC for the declaration of an emergency class shall be performed in accordance with § 50.72 of this chapter , as applicable. ( 7 ) Elimination of duplication. Separate notifications and reports are not required for events that are also reportable in accordance with §§ 50.72 and 50.73 of this chapter . However, these