Approve Extension of NNSA Advance Change Directive 470.6, Use of Mobile Devices within National Nuclear Security Administration Secure Spaces

NNSA-2021-003897 1//A • .1f ~6.1jDepartment of Energy /Ill V ~~ ~~• National Nuclear Security Administration National Nuc/aar Seculfty Admimsttallon Washington, DC 20585 August 17, 202 1 MEMORANDUM FOR THE ADMINISTRATOR ·ce A. Digitally signed by Maurl FROM: MONTE MALLIN Maurice A. Mallin M II . Date: 2021.08.17 ACTING DIRECTOR a In 01ssA1-04•00· OFFICE OF POLICY AND STRATEGIC PLANNING Digitally signed by Jeffrey JEFFREY R. JOHNSON Jeffrey R. R. Johnson Date: 2021 .08.16 ASSOCIATEADMINISTRATOR Johnson 18:24: 19 -04'00' FOR DEFENSE NUCLEAR SECURITY SUBJECT: ACTION: Approve Extension ofNNSA Advance Change Directive 470.6, Use ofMobile Devices Within National Nuclear Security Administration Secure Spaces ISSUE: Approve a six-month extension for NNSA Advance Change Directive (ACD) 470.6. BACKGROUND: ACDs are temporary directives that expire on the date the replacement directive is issued or 12 months after the effective date of the ACD, whichever is earlier. ACD 470.6 was issued on July 15, 2019, extended to July 15, 2021 , and was scheduled to be replaced by National Nuclear Security Administration (NNSA) Supplemental Directive (SD) 470.6, Technical Security Program. SD 470.6 has experienced delays in processing and is currently being finalized. DISCUSSION: The Office of Defense Nuclear Security (DNS) has worked diligently over the past two years to incorporate the requirements of this ACD into SD 470.6, but needs additional time to finalize the SD due to several complicating factors. First, DNS experienced significant delays in processing the SD's large classified section due to Departmental COVID-19 precautions which limited access to the classified facilities within the National Capital Region. Second, DNS sought to expand the informal and formal coordination processes to ensure Department of Energy (DOE) stakeholders had an opportunity to review and provide feedback. This coordination resulted in an impasse requiring coordination with NNSA and DOE General Counsel and has delayed processing of the SD over the past 12 months. SENSITIVITIES: None. POLICY IMPACT: ACD 470.6 expired on July 15, 2021, and no currentNNSA or DOE policy sufficiently covers all mobile device security requirements codified in this ACD. https://2021.08.17 --- --- 2 URGENCY: The ACD expired and NNSA is operating without a uniform, codified strategy to use mobile devices within secure spaces. Reverting to a collection of disparate approaches for implementing mobile device policy will reintroduce confusion resulting in increased risk. NNSA will also be out of compliance with the Committee on National Security Systems Directive Number 510, Directive on the Use ofMobile Devices Within Secure Spaces, which directs heads of federal agencies and departments to incorporate its requirements into their own policies. It is urgent that this request for extension of the ACD be approved to ensure compliance and to preclude increased risk. RECOMMENDATION: Approve the six-month extension for ACD 470.6, Use of Mobile Devices Within National Nuclear Security Administration Secure Spaces. APPROVE: ,.J \-+ DISAPPROVE: NEEDS DISCUSSION: DATE: £?'I\~ { "LI