Approve 12-Month Extension for ACD 470.6, Use of Mobile Devices within National Nuclear Security Administration Secure Spaces

Department of Energy AN H. WS National Nuclear Security Administration Washington, DC 20585 July 14, 2020 MEMORANDUM FOR THE ADMINISTRATOR FROM: MEGAN MILAM Stephanie Seniaieh DIRECTOR, OFFICE OF POLICY AND pe par Sitter STRATEGIC PLANNING 09-32-38 -04'00! SUBJECT: ACTION: Approve 12-Month Extension for Advance Change Directive (ACD) 470.6, Use of Mobile Devices Within National Nuclear Security Administration Secure Spaces ISSUE: Approve a 12-month extension for ACD 470.6. BACKGROUND: ACDs are temporary directives the Administrator uses to issue immediate direction to meet statutory, regulatory, or programmatic requirements that are exigent in nature. The responsible office must either incorporate the ACD into an existing NNSA directive or convert it to a new directive as soon as possible. ACDs expire on the date the replacement directive is issued or 12 months after the effective date of the ACD, whichever is earlier. DISCUSSION: The Office of Defense Nuclear Security (NA-70) has worked diligently during the past year to incorporate the requirements of this ACD into Supplemental Directive (SD) 470.6, but needs additional time to complete the revision for two reasons. The first is that the SD’s large classified section could not be accessed during the COVID-19 pandemic due to telework constraints. The second is that NA-70 management expanded the informal coordination process to include DOE stakeholders, which resulted in unexpected delays. POLICY IMPACT: If this ACD expires, NNSA will be operating without a uniform, codified strategy to use mobile devices within secure spaces. Reverting to a collection of disparate approaches for implementing mobile device policy will reintroduce confusion resulting in increased risk. NNSA will also be out of compliance with the Committee on National Security Systems Directive Number 510, Directive on the Use of Mobile Devices Within Secure Spaces, which directs heads of federal agencies and departments to incorporate its requirements into their own policies. URGENCY: ACD 470.6 expires on July 15, 2020, and no NNSA or DOE policy sufficiently covers all mobile device security requirements codified in this ACD. ® “eh Ut Na 7A Sec a Administr. “il RECOMMENDATION: Approve the 12-month extension for ACD 470.6, Use of Mobile Devices Within National Nuclear Security Administration Secure Spaces. APPROVE: _[J|,DISAPPROVE: ___ NEEDS DISCUSSION: DATE: I$! 2010