| (G) When not in use, the licensee shall store its security
plan and implementing procedures in a manner to prevent unauthorized
access. Information stored in non-removable electronic form must be
password protected.
(H) The licensee shall retain as a record for three
years after the document is no longer needed:
(i) a copy of the information protection procedures;
and
(ii) the list of individuals approved for access to
the security plan or implementing procedures.
(k) LLEA coordination.
(1) A licensee subject to subsections (i) and (j) of
this section, this subsection, and subsections (l) - (q) of this section
shall coordinate, to the extent practicable, with an LLEA for responding
to threats to the licensee's facility, including any necessary armed
response. The information provided to the LLEA must include:
(A) a description of the facilities and the category
1 and category 2 quantities of radioactive materials along with a
description of the licensee's security measures that have been implemented
to comply with subsections (i) and (j) of this section, this subsection,
and subsections (l) - (q) of this section; and
(B) a notification that the licensee will request a
timely armed response by the LLEA to any actual or attempted theft,
sabotage, or diversion of category 1 or category 2 quantities of material.
(2) The licensee shall notify the executive director
within three business days if:
(A) the LLEA has not responded to the request for coordination
within 60 days of the coordination request; or
(B) the LLEA notifies the licensee that the LLEA does
not plan to participate in coordination activities.
(3) The licensee shall document its efforts to coordinate
with the LLEA. The documentation must be kept for three years.
(4) The licensee shall coordinate with the LLEA at
least every 12 months, or when changes to the facility design or operation
adversely affect the potential vulnerability of the licensee's material
to theft, sabotage, or diversion.
(l) Security zones.
(1) Licensees shall ensure that all aggregated category
1 and category 2 quantities of radioactive material are used or stored
within licensee established security zones. Security zones may be
permanent or temporary.
(2) Temporary security zones must be established as
necessary to meet the licensee's transitory or intermittent business
activities, such as periods of maintenance, source delivery, and source
replacement.
(3) Security zones must, at a minimum, allow unescorted
access only to approved individuals through:
(A) isolation of category 1 and category 2 quantities
of radioactive materials by the use of continuous physical barriers
that allow access to the security zone only through established access
control points. A physical barrier is a natural or man-made structure
or formation sufficient for the isolation of the category 1 or category
2 quantities of radioactive material within a security zone; or
(B) direct control of the security zone by approved
individuals at all times; or
(C) a combination of continuous physical barriers and
direct control.
(4) For category 1 quantities of radioactive material
during periods of maintenance, source receipt, preparation for shipment,
installation, or source removal or exchange, the licensee shall, at
a minimum, provide sufficient individuals approved for unescorted
access to maintain continuous surveillance of sources in temporary
security zones and in any security zone in which physical barriers
or intrusion detection systems have been disabled to allow such activities.
(5) Individuals not approved for unescorted access
to category 1 or category 2 quantities of radioactive material must
be escorted by an approved individual when in a security zone.
(m) Monitoring, detection, and assessment.
(1) Monitoring and detection.
(A) Licensees shall establish and maintain the capability
to continuously monitor and detect without delay all unauthorized
entries into its security zones. Licensees shall provide the means
to maintain continuous monitoring and detection capability in the
event of a loss of the primary power source or provide for an alarm
and response in the event of a loss of the capability to continuously
monitor and detect unauthorized entries.
(B) Monitoring and detection must be performed by:
(i) a monitored intrusion detection system that is
linked to an onsite or offsite central monitoring facility;
(ii) electronic devices for intrusion detection alarms
that will alert nearby facility personnel;
(iii) a monitored video surveillance system;
(iv) direct visual surveillance by approved individuals
located within the security zone; or
(v) direct visual surveillance by a licensee designated
individual located outside the security zone.
(C) A licensee subject to subsections (i) - (l) of
this section, this subsection, and subsections (n) - (q) of this section
shall also have a means to detect unauthorized removal of the radioactive
material from the security zone. This detection capability must provide:
(i) for category 1 quantities of radioactive material,
immediate detection of any attempted unauthorized removal of the radioactive
material from the security zone. Such immediate detection capability
must be provided by:
(I) electronic sensors linked to an alarm;
(II) continuous monitored video surveillance; or
(III) direct visual surveillance.
(ii) For category 2 quantities of radioactive material,
weekly verification through physical checks, tamper indicating devices,
use, or other means to ensure that the radioactive material is present.
(2) Assessment. Licensees shall immediately assess
each actual or attempted unauthorized entry into the security zone
to determine whether the unauthorized access was an actual or attempted
theft, sabotage, or diversion.
(3) Personnel communications and data transmission.
For personnel and automated or electronic systems supporting the licensee's
monitoring, detection, and assessment systems, licensees shall:
(A) maintain continuous capability for personnel communication
and electronic data transmission and processing among site security
systems; and
(B) provide an alternative communication capability
for personnel, and an alternative data transmission and processing
capability, in the event of a loss of the primary means of communication
or data transmission and processing. Alternative communications and
data transmission systems may not be subject to the same failure modes
as the primary systems.
(4) Response. Licensees shall immediately respond to
any actual or attempted unauthorized access to the security zones,
or actual or attempted theft, sabotage, or diversion of category 1
or category 2 quantities of radioactive material at licensee facilities
or temporary job sites. For any unauthorized access involving an actual
or attempted theft, sabotage, or diversion of category 1 or category
2 quantities of radioactive material, the licensee's response shall
include requesting, without delay, an armed response from the LLEA.
(n) Maintenance and testing.
(1) Each licensee subject to subsections (i) - (m)
of this section, this subsection, and subsections (o) - (q) of this
section shall implement a maintenance and testing program to ensure
that intrusion alarms, associated communication systems, and other
physical components of the systems used to secure or detect unauthorized
access to radioactive material are maintained in operable condition
and capable of performing their intended function when needed. The
equipment relied on to meet the security requirements of this section
must be inspected and tested for operability and performance at the
manufacturer's suggested frequency. If there is no manufacturer's
suggested frequency, the testing must be performed at least annually,
not to exceed 12 months.
(2) The licensee shall maintain records on the maintenance
and testing activities for three years.
(o) Requirements for mobile devices. Each licensee
that possesses mobile devices containing category 1 or category 2
quantities of radioactive material must:
(1) have two independent physical controls that form
tangible barriers to secure the material from unauthorized removal
when the device is not under direct control and constant surveillance
by the licensee; and
Cont'd... |
