Document: 10 CFR Part 73
Document ID: 4a082a11-230f-414b-9764-e21be2ad963b
Document Type: cfr
Title: Cyber security event notifications.
Source: 10 CFR Part 73
Source URL: https://www.ecfr.gov/current/title-10/part-73/section-73.77
Revision Date: 
Chapter: 
Section ID: 73.77
CFR Part: 73
CFR Title: 10

Content:
port must be telephonically reported to the NRC Headquarters Operations Center under paragraph (c) of this section and also submitted in a revised written security follow-up report (with the revisions indicated) as required under this section. ( 7 ) Errors discovered in a written security follow-up report must be corrected in a revised written security follow-up report with the revision(s) indicated. ( 8 ) The revised written security follow-up report must replace the previous written security follow-up report; the update must be complete and not be limited to only supplementary or revised information. ( 9 ) If the licensee subsequently retracts a telephonic notification made under this section as not meeting the threshold of a reportable event, and has not yet submitted a written security follow-up report then submission of a written security follow-up report is not required. ( 10 ) If the licensee subsequently retracts a telephonic notification made under this section as not meeting the threshold of a reportable event after it has submitted a written security follow-up report required by this paragraph, then the licensee shall submit a revised written security follow-up report in accordance with this paragraph. ( 11 ) Each written security follow-up report submitted containing Safeguards Information or Classified Information must be created, stored, marked, labeled, handled, and transmitted to the NRC according to the requirements of §§ 73.21 and 73.22 or with part 95 of this chapter , as applicable. ( 12 ) Each licensee shall maintain a copy of the written security follow-up report of an event submitted under this section as a record for a period of three years from the date of the report or until the Commission terminates the license for which the records were developed, whichever comes first. [ 80 FR 67275 , Nov. 2, 2015]