Protection of Computer Systems Used to Control and Track Nuclear Materials

Computers perform an essential role in the tracking and accountability of special nuclear materials across the department of energy. The level of trust placed in these systems to perform these very sensitive applications can be directly tied to the effective implementation of the required administrative, physical, technical and personnel security controls afforded these systems. The potential consequences of a system that lacks the necessary protections and controls are grave. In fact, such a system may be easily exploited to actually aid in the theft or diversion of the special nuclear materials that it is designed to track and account for. Therefore, it is essential to ensure that these automated systems are operated in accordance with their approved security plans, and that these controls and protections (to include personnel) are validated on a recurring basis. This paper is an overview of the controls and procedures necessary to be incorporated into the protection measures of computer systems including those which are used to control and track the movement and location of nuclear materials. The protection measures described herein are based on applicable Federal statutes, regulation, National Security Directives, Executive Orders, and Federal standards. The Atomic Energy Act describes requirements for the protection of Restricted Data.