Nebraska Administrative Code
Topic - HEALTH AND HUMAN SERVICES SYSTEM
Title 180 - CONTROL OF RADIATION
Chapter 24 - PHYSICAL PROTECTION OF RADIOACTIVE MATERIAL
Section 180-24-012 - GENERAL SECURITY PROGRAM REQUIREMENTS

012.01(A) DEVELOPMENT AND PURPOSE. Each licensee identified in 180 NAC 24-011 must develop a written security plan specific to its facilities and operations. The purpose of the security plan is to establish the licensee's overall security strategy to ensure the integrated and effective functioning of the security program required by 180 NAC 24-011 through 24-019. The security plan must, at a minimum:

012.01(B) REVIEW AND APPROVAL. The security plan must be reviewed and approved by the individual with overall responsibility for the security program. A licensee must make revisions as necessary to ensure the effective implementation of Department requirements. The licensee must ensure:

012.01(C) RECORDS. The licensee must retain a copy of the current security plan as a record for three years after the security plan is no longer required. If any portion of the plan is superseded, the licensee must retain the superseded material for three years after the record is superseded.

(A) Develop and maintain written procedures that document how the requirements of 180 NAC 24-011 through 24-019 and the security plan will be met;

(B) Approve, in writing by the individual with overall responsibility for the program, the implementing procedures and revisions to these procedures; and

(C) Retain a copy of the current procedure as a record for three years after the procedure is no longer needed. Superseded portions of the procedure must be retained for three years after the record is superseded.

012.03(A) REQUIREMENTS. The training must include instruction in:

012.03(B) DETERMINATION. In determining those individuals who must be trained on the security program, the licensee must consider each individual's assigned activities during authorized use and response to potential situations involving actual or attempted theft, diversion, or sabotage of category 1 or category 2 quantities of radioactive material. The extent of the training must correspond with the individual's potential involvement in the security of category 1 or category 2 quantities of radioactive material.

012.03(C) REFRESHER TRAINING. Refresher training must be provided at a frequency not to exceed 12 months and when significant changes have been made to the security program. This training must include:

012.03(D) RECORDS. The licensee must maintain records of the initial and refresher training for three years from the date of the training. The training records must include dates of the training, topics covered, a list of licensee personnel in attendance, and related information.

(A) Licensees authorized to possess category 1 or category 2 quantities of radioactive material must limit access to and unauthorized disclosure of their security plan, implementing procedures, and the list of individuals that have been approved for unescorted access.

(B) Efforts to limit access must include the development, implementation, and maintenance of written policies and procedures for controlling access to, and for proper handling and protection against unauthorized disclosure of, the security plan, implementing procedures, and the list of individuals that have been approved for unescorted access.

(C) Before granting an individual access to the security plan, implementing procedures, or the list of individuals that have been approved for unescorted access, licensees must:

(D) Licensees need not subject the following individuals to the background investigation elements for protection of information:

(E) The licensee must document the basis for concluding that an individual is trustworthy and reliable and should be granted access to the security plan, implementing procedures, or the list of individuals that have been approved for unescorted access.

(F) Licensees must maintain a list of persons currently approved for access to the security plan, implementing procedures, or the list of individuals that have been approved for unescorted access. When a licensee determines that a person no longer needs access to the security plan, implementing procedures, or the list of individuals that have been approved for unescorted access, or no longer meets the access authorization requirements for access to the information, the licensee must remove the person from the approved list as soon as possible, but no later than seven working days, and take prompt measures to ensure that the individual is unable to obtain the security plan, implementing procedures, or the list of individuals that have been approved for unescorted access.

(G) When not in use, the licensee must store its security plan, implementing procedures, and the list of individuals that have been approved for unescorted access in a manner to prevent unauthorized access. Information stored in nonremovable electronic form must be password protected.

(H) The licensee must retain as a record for three years after the document is no longer needed: