Source: http://ladirection333.blogspot.com.au/2012/09/part-95facility-security-clearance-and.html
Timestamp: 2018-01-23 21:35:12
Document Index: 114759954

Matched Legal Cases: ['ART 95', 'art.\n95', '§ 95', '§ 95', '§ 95', '§ 95', 'art 73', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 25', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', '§ 95', 'art 73', '§ 95', '§ 95', 'art 95', '§ 95']

La Direction 333: PART 95—FACILITY SECURITY CLEARANCE AND SAFEGUARDING OF NATIONAL SECURITY INFORMATION AND RESTRICTED DATA
95.1 Purpose.
95.3 Scope.
95.5 Definitions.
95.7 Interpretations.
95.8 Information collection requirements: OMB approval.
95.9 Communications.
95.11 Specific exemptions.
95.13 Maintenance of records.
95.15 Approval for processing licensees and others for facility clearance.
95.17 Processing facility clearance.
95.18 Key personnel.
95.19 Changes to security practices and procedures.
95.20 Grant, denial or termination of facility clearance.
95.21 Withdrawal of requests for facility security clearance.
95.23 Termination of facility clearance.
95.25 Protection of National Security Information and Restricted Data in storage.
95.27 Protection while in use.
95.29 Establishment of Restricted or Closed areas.
95.31 Protective personnel.
95.33 Security education.
95.34 Control of visitors.
95.35 Access to matter classified as National Security information and Restricted Data.
95.36 Access by representatives of the International Atomic Energy Agency or by participants in other international agreements.
95.37 Classification and preparation of documents.
95.39 External transmission of documents and material.
95.41 External receipt and dispatch records.
95.43 Authority to reproduce.
95.45 Changes in classification.
95.47 Destruction of matter containing classified information.
95.49 Security of automatic data processing (ADP) systems.
95.51 Retrieval of classified matter following suspension or revocation of access authorization.
95.53 Termination of facility clearance.
95.55 Continued applicability of the regulations in this part.
95.57 Reports.
95.59 Inspections.
95.61 Violations.
95.63 Criminal penalties.
Authority: Atomic Energy Act secs. 145, 161, 223, 234 (42 U.S.C. 2165, 2201, 2273, 2282); Energy Reorganization Act sec. 201 (42 U.S.C. 5841); Government Paperwork Elimination Act sec. 1704 (44 U.S.C. 3504 note); E.O. 10865, as amended, 3 CFR 1959– 1963 Comp., p. 398 (50 U.S.C. 401, note); E.O. 12829, 3 CFR, 1993 Comp., p. 570; E.O. 13526, 3 CFR, 2010 Comp., pp. 298–327; E.O. 12968, 3 CFR, 1995 Comp., p. 391; E.O. 13526, 3 CFR, 2010 Comp., p. 298.
[75 FR 73945, Nov. 30, 2010; 77 FR 39910, Jul. 6, 2012]
§ 95.3 Scope.
[62 FR 17690, Apr. 11, 1997; 70 FR 32227, June 2, 2005]
Infraction means any knowing, willful, or negligent action contrary to the requirements of E.O. 13526, as amended, or any predecessor or successor order, or its implementing directives that does not comprise a ‘‘violation,’’ as defined in this section.
§ 95.7 Interpretations.
(a) By mail addressed to: ATTN: Document Control Desk, Director, Division of Security Operations, Office of Nuclear Security and Incident Response, U.S Nuclear Regulatory Commission, Washington, DC 20555-0001;
(c) Where practicable, by electronic submission, for example, Electronic Information Exchange, or CD-ROM. Electronic submissions must be made in a manner that enables the NRC to receive, read, authenticate, distribute, and archive the submission, and process and retrieve it a single page at a time. Detailed guidance on making electronic submissions can be obtained by visiting the NRC’s Web site at http://www.nrc.gov/site-help/e-submittals.html; by e-mail to MSHD.Resource@nrc.gov; or by writing the Office of Information Services, U.S. Nuclear Regulatory Commission, Washington, DC 20555–0001. The guidance discusses, among other topics, the formats the NRC can accept, the use of electronic signatures, and the treatment of nonpublic information.
[64 FR 15650, Apr. 1, 1999, as amended at 68 FR 41222, July 11, 2003; 68 FR 58823, Oct. 10, 2003; 70 FR 69421, Nov. 16, 2005; 72 FR 33386, Jun. 18, 2007; 74 FR 62685, Dec. 1, 2009]
(b) Each record required by this part must be legible throughout the retention period specified by each Commission
regulation. The record may be the original or a reproduced copy or a microform provided that the copy or microform is authenticated by authorized personnel and that the microform is capable of producing a clear copy throughout the required retention period. The record may also be stored in electronic media with the capability for producing legible,
accurate, and complete records during the required retention period. Records such as letters, drawings, or
specifications must include all pertinent information such as stamps, initials, and signatures. The licensee, certificate
holder, or other person shall maintain adequate safeguards against tampering with and loss of records.
§ 95.15 Approval for processing licensees and others for facility clearance.
(a) A licensee, certificate holder, or other person who has a need to use, process, store, reproduce, transmit, transport, or handle NRC classified information at any location in connection with Commission-related activities shall promptly request an NRC facility clearance. This specifically includes situations where a licensee, certificate holder, or other person needs a contractor or consultant to have access to NRC classified information. Also included are others who require access to classified information in connection with NRC regulated activities but do not require use, storage, or possession of classified information outside of NRC facilities. However, it is not necessary for a licensee, certificate holder, or other person to request an NRC facility clearance for access to another agency's classified information at that agency's facilities or to store that agency's classified information at their facility, provided no NRC classified information is involved and they meet the security requirements of the other agency. If NRC classified information is involved, the requirements of § 95.17 apply.
(a) Following the receipt of an acceptable request for facility clearance, the NRC will either accept an existing facility clearance granted by a current CSA and authorize possession of license or certificate related classified information, or process the facility for a facility clearance. Processing will include--
(a) Except as specified in paragraph (b) of this section, each licensee, certificate holder, or other person shall obtain prior CSA approval for any proposed change to the name, location, security procedures and controls, or floor plan of the approved facility. A written description of the proposed change must be furnished to the CSA and the NRC Regional Administrator of the cognizant Regional Office listed in appendix A to part 73 of this chapter, and, if the NRC is not the CSA, also to the Director, Division of Security Operations, Office of Nuclear Security and Incident Response; the communications to NRC personnel should be by an appropriate method listed in § 95.9. These substantive changes to the Standard Practice Procedures Plan that affect the security of the facility must be submitted to the NRC Division of Security Operations, or CSA, at least 30 days prior to the change so that they may be evaluated. The CSA shall promptly respond in writing to all such proposals. Some examples of substantive changes requiring prior CSA approval include--
(b) A licensee, certificate holder, or other person may effect a minor, nonsubstantive change to an approved Standard Practice Procedures Plan for the safeguarding of classified information without receiving prior CSA approval. These minor changes that do not affect the security of the facility may be submitted to the addressees noted in paragraph (a) of this section within 30 days of the change. Page changes rather than a complete rewrite of the plan may be submitted. Some examples of minor, nonsubstantive changes to the Standard Practice Procedures Plan include—
§ 95.20 Grant, denial or termination of facility clearance.
The Division of Security Operations shall provide notification in writing (or orally with written confirmation) to the licensee, certificate holder, or other person of the Commission’s grant, acceptance of another agency’s facility clearance, denial, or termination of facility clearance. This information must also be furnished to representatives of the NRC, NRC contractors, licensees, certificate holders, or other person, or other Federal agencies having a need to transmit classified information to the licensees or other person.
[64 FR 15651, Apr. 1, 1999, as amended at 68 FR 41222, July 11, 2003; 72 FR 49562, Aug. 28, 2007; 74 FR 62685, Dec. 1, 2009]
(a) Facility clearance will be terminated when--
[62 FR 17692, Apr. 11, 1997; 72 FR 49562, Aug. 28, 2007]
(a) Secret matter, while unattended or not in actual use, must be stored in--
(c) Classified lock combinations.
(1) A minimum number of authorized persons may know the combinations to authorized storage containers. Security containers, vaults, cabinets, and other authorized storage containers must be kept locked when not under the direct supervision of an authorized person entrusted with the contents.
(h) End of day security checks.
(1) Facilities that store classified matter shall establish a system of security checks at the close of each working day to ensure that all classified matter and security repositories have been appropriately secured.
§ 95.27 Protection while in use.
While in use, classified matter must be under the direct control of an authorized individual to preclude physical, audio, and visual access by persons who do not have the prescribed access authorization or other written CSA disclosure authorization (see § 95.36 for additional information concerning disclosure authorizations).
§ 95.29 Establishment of Restricted or Closed areas.
(a) If, because of its nature, sensitivity or importance, classified matter cannot otherwise be effectively controlled in accordance with the provisions of §§ 95.25 and 95.27, a Restricted or Closed area must be established to protect this matter.
§ 95.31 Protective personnel.
(a) Possess an "L" access authorization (or CSA equivalent) if the licensee, certificate holder, or other person possesses information classified Confidential National Security Information, Confidential Restricted Data or Secret National Security Information.
(b) Possess a "Q" access authorization (or CSA equivalent) if the licensee, certificate holder, or other person
possesses Secret Restricted Data related to nuclear weapons design, manufacturing and vulnerability information; and certain particularly sensitive Naval Nuclear Propulsion Program information (e.g., fuel manufacturing technology) and the protective personnel require access as part of their regular duties.
[62 FR 17694, Apr. 11, 1997; 72 FR 49562, Aug. 28, 2007]
(a) Facility Security Officer Training. Licensees and others are responsible for ensuring that the Facility Security Officer, and others performing security duties, complete security training deemed appropriate by the CSA. Training requirements must be based on the facility's involvement with classified information and may include a Facility Security Officer orientation course and, for Facility Security Officers at facilities with safeguarding capability, a Facility Security Officer Program Management Course. Training, if required, should be completed within 1 year of appointment to the position of Facility Security Officer.
(d) Classified Information Nondisclosure Agreement (SF09312). The SF09312 is an agreement between the United States and an individual who is cleared for access to classified information. An employee issued an initial access authorization must, in accordance with the requirements of § 25.23 of this chapter, execute an SF09312 before being granted access to classified information. The Facility Security Officer shall forward the executed SF09312 to the CSA for retention. If the employee refuses to execute the SF09312, the licensee or other facility shall deny the employee access to classified information and submit a report to the CSA. The SF09312 must be signed and dated by the employee and witnessed. The employee's and witness' signatures must bear the same date.
(e) Initial Security Briefings. Before being granted access to classified information, an employee shall receive an initial security briefing that includes the following topics:
(1) A Threat Awareness Briefing.
(2) A Defensive Security Briefing.
(3) An overview of the security classification system.
(4) Employee reporting obligations and requirements.
(f) Refresher Briefings. The licensee or other facility shall conduct refresher briefings for all cleared employees every 3 years. As a minimum, the refresher briefing must reinforce the information provided during the initial briefing and inform employees of appropriate changes in security regulations. This requirement may be satisfied by use of audio/video materials and/or by issuing written materials.
(g) Debriefings. Licensee and other facilities shall debrief cleared employees at the time of termination of employment (discharge, resignation, or retirement); when an employee's access authorization is terminated, suspended, or revoked; and upon termination of the Facility Clearance.
(h) Records reflecting an individual's initial and refresher security orientations and security termination must be maintained for three years after termination of the individual's access authorization.
§ 95.34 Control of visitors.
[64 FR 15652, Apr. 1, 1999; 72 FR 49563, Aug. 28, 2007]
(1)(i) A "Q" access authorization which permits access to matter classified as Secret and Confidential Restricted Data or Secret and Confidential National Security Information which includes intelligence information, CRYPTO (i.e., cryptographic information) or other classified communications security (COMSEC) information, or
(ii) An "L" access authorization which permits access to matter classified as Confidential Restricted Data and Secret and Confidential National Security Information other than that noted in paragraph (a)(1)(i) of this section except that access to certain Confidential COMSEC information is permitted as authorized by a National Communications Security Committee waiver dated February 14, 1984.
(2) An established "need-to-know" for the matter (See Definitions, § 95.5).
(3) NRC-approved storage facilities if classified documents or material are to be transmitted to the licensee, certificate
holder, or other person.
[59 FR 48975, Sept. 23, 1994; 72 FR 49563, Aug. 28, 2007]
[62 FR 17694, Apr. 11, 1997, as amended at 64 FR 15652, Apr. 1, 1999. Amended at 68 FR 41222, July 11, 2003; 72 FR 49563, Aug. 28, 2007; 73 FR 78614, Dec. 23, 2008; 74 FR 62686, Dec. 1, 2009]
(a) Classification. Classified information generated or possessed by a licensee, certificate holder, or other person must be appropriately marked. Classified material which is not conducive to markings (e.g., equipment) may be exempt from this requirement. These exemptions are subject to the approval of the CSA on a case-by-case basis. If a person or facility generates or possesses information that is believed to be classified based on guidance provided by the NRC or by derivation from classified documents, but which no authorized classifier has determined to be classified, the information must be protected and marked with the appropriate classification markings pending review and signature of an NRC authorized classifier. This information shall be protected as classified information pending final
(c) Markings required on face of documents.
(1) For derivative classification of classified National Security Information:
(i) Derivative classifications of classified National Security Information must contain the identity of the source document or the classification guide, including the agency and office of origin, on the "Derived From" line and its classification date. If more than one source is cited, the "Derived From" line should indicate "Multiple Sources." The derivative classifier shall maintain the identification of each source with the file or record copy of the derivatively classified document.
(ii) Declassification instructions. When marking derivatively classified documents, the "DECLASSIFY ON" line must carry forward the declassification instructions as reflected in the original document. If multiple sources are used, the instructions will carry forward the longest duration.
Derived From _________________________________________
Reason ______________________________________________
Declassify On: _______________________________________
Classifier: ___________________________________________
(i) Identity of the classifier. The identity of the classifier must be shown by completion of the "Derivative Classifier" line. The "Derivative Classifier" line must show the name of the person classifying the document and the basis for the classification. Dates for downgrading or declassification do not apply.
(ii) Classification designation (e.g., Secret, Confidential) and Restricted Data. NOTE: No "Declassification" instructions will be placed on documents containing Restricted Data.
(e) Additional markings.
(1) If the document contains any form of Restricted Data, it must bear the appropriate marking on the first page of text, on the front cover and title page, if any. For example: "This document contains Restricted Data as defined in the Atomic Energy Act of 1954. Unauthorized disclosure subject to Administrative and Criminal Sanctions."
(Classification level of transmittal document standing alone or the word "UNCLASSIFIED" if the transmittal document contains no classified information.)
(h) Classification challenges. Licensees, certificate holders, or other persons in authorized possession of classified National Security Information who in good faith believe that the information’s classification status (i.e., that the document), is classified at either too high a level for its content (overclassification) or too low for its content (underclassification) are expected to challenge its classification status. Licensees, certificate holders, or other persons who wish to challenge a classification status shall—
(2) The inner envelope or wrapper must contain the addressee's classified mail address and the name of the intended recipient. The appropriate classification must be placed on both sides of the envelope (top and bottom) and the additional markings, as appropriate, referred to in § 95.37(e) must be placed on the side bearing the address.
(c) Methods of transportation.
(1) Secret matter may be transported only by one of the following methods within and directly between the U.S., Puerto Rico, or a U.S. possession or trust territory:
Note: The "Waiver of Signature and Indemnity" block on the U.S. Postal Service Express Mail Label 1109B may not be executed and the use of external (street side) express mail collection boxes is prohibited.
(ii) A cleared "Commercial Carrier."
(d) Telecommunication of classified information. Classified information may not be telecommunicated unless the telecommunication system has been approved by the CSA. Licensees, certificate holders or other persons who may require a secure telecommunication system shall submit a telecommunication plan as part of their request for facility clearance, as outlined in § 95.15, or as an amendment to their existing Standard Practice Procedures Plan for the protection of classified information.
(e) Security of classified information in transit. Classified matter that, because of its nature, cannot be transported in accordance with § 95.39(c), may only be transported in accordance with procedures approved by the CSA. Procedures for transporting classified matter are based on a satisfactory transportation plan submitted as part of the licensee's, certificate holder, or other person's request for facility clearance or submitted as an amendment to its existing Standard Practice Procedures Plan.
§ 95.41 External receipt and dispatch records.
[62 FR 17696, Apr. 11, 1997]
§ 95.43 Authority to reproduce.
[62 FR 17697, Apr. 11, 1997; 72 FR 49564, Aug. 28, 2007]
§ 95.45 Changes in classification.
(a) Documents containing classified National Security Information must be downgraded or declassified as authorized by the NRC classification guides or as determined by the NRC. Requests for downgrading or declassifying any NRC classified information should be forwarded to the NRC's Division of Security Operations, Nuclear Security and Incident Response, using an appropriate method listed in § 95.9. Requests for downgrading or declassifying of Restricted Data will be forwarded to the NRC Division of Facilities and Security for coordination with the Department of Energy.
(c) New markings reflecting the current classification status of the document will be applied in accordance with the requirements of § 95.37.
[62 FR 17697, Apr. 11, 1997, as amended at 64 FR 15653, Apr. 1, 1999. Amended at 68 FR 41222, July 11, 2003; 68 FR 58823, Oct. 10, 2003; 72 FR 49564, Aug. 28, 2007; 74 FR 62686, Dec. 1, 2009]
§ 95.49 Security of automatic data processing (ADP) systems.
§ 95.53 Termination of facility clearance.
(b) In any instance where a facility clearance has been terminated based on a determination of the CSA that further
possession of classified matter by the facility would not be in the interest of the national security, the licensee,
certificate holder, or other person for the facility shall, upon notice from the CSA, dispose of classified documents in a
manner specified by the CSA.
[64 FR 15653, Apr. 1, 1999 as amended at 68 FR 41222, July 11, 2003; 72 FR 49564, Aug. 28, 2007; 74 FR 62686, Dec. 1, 2009]
§ 95.55 Continued applicability of the regulations in this part.
Each licensee, certificate holder, or other person having a facility clearance shall report to the CSA and the Regional
Administrator of the appropriate NRC Regional Office listed in 10 CFR part 73, appendix A:
(c) In addition, NRC requires records for all classification actions (documents classified, declassified, or downgraded) to be submitted to the NRC Division of Security Operations. These may be submitted either on an "as completed" basis or monthly. The information may be submitted either electronically by an on-line system (NRC prefers the use of a dial-in automated system connected to the Division of Security Operations) or by paper copy using NRC Form 790.
§ 95.59 Inspections.
[62 FR 17698, Apr. 11, 1997; 70 FR 32228, June 2, 2005; 72 FR 49564, Aug. 28, 2007; 75 FR 73945, Nov. 30, 2010]
§ 95.63 Criminal penalties.
(b) The regulations in part 95 that are not issued under sections 161b, 161i, or 161o for the purposes of section 223 are as follows: §§ 95.1, 95.3, 95.5, 95.7, 95.8, 95.9, 95.11, 95.17, 95.19, 95.21, 95.23, 95.55, 95.59, 95.61, and 95.63.
Posted by Ne033x at 1:49 PM