Final SS 10 CFR Part 25

FINAL SUPPORTING STATEMENT FOR

10 CFR PART 25 ACCESS AUTHORIZATION

(3150-0046) EXTENSION

Description of the Information Collection

Title 10 of the Code of Federal Regulations (10 CFR) Chapter I, “Nuclear Regulatory Commission” (NRC), Part 25, “Access Authorization,” establishes procedures for granting, reinstating, extending, transferring, and terminating access authorizations of licensee personnel, licensee contractors or agents, and other persons (e.g., individuals involved in adjudicatory procedures as set forth in 10 CFR Part 2 Subpart I) who may require access to classified information. Individuals are required to complete the necessary security forms and report information relating to arrests, court actions, foreign contacts, foreign travels, alcohol, drugs, psychological, and financial matters. There are a total of 78 licensees and other organizations who must comply with the reporting and recordkeeping requirements of this information collection. Each licensee or organization employing individuals approved for personnel security access authorization under this part, shall maintain records pertaining to the personnel access authorization, a termination, cancellation or reinstatement or a request for exemption from

10 CFR Part 25. These records are subject to review and inspection by Cognizant Security Agency (CSA) representatives during security reviews. Reports such as notification of access authorization requests, NRC Form 237, and classified visits are submitted "upon occasion" as prescribed in 10 CFR Part 25.

1. JUSTIFICATION

1. Need for and Practical Utility of the Information Collection

10 CFR Part 25 contains numerous reporting, recordkeeping, and application requirements, including requirements for submittal of personnel security access authorization and access authorization renewal requests, security recordkeeping requirements, and security reporting and notification procedures relative to access authorizations. All of the reporting, recordkeeping, and application requirements are necessary for one or more of the reasons listed below.

1. To obtain the essential data from individuals necessary to determine their eligibility or continuing eligibility for an NRC access authorization for access to classified information. These information requirements are derived from pertinent statutes and Executive Orders which authorize background investigations on an individual’s character, associations, and loyalty.

2. To obtain essential data describing normal operating procedures pertinent to personnel security and visitor control activities to ensure that regulatory requirements are being met by licensees and other organizations.

3. To obtain essential data which serves as the basis for determining continued eligibility of an individual for an NRC access authorization when occurrences or developments arise which may affect the initial determination.

The information collection requirements of 10 CFR Part 25 are identified and explained below:

Section 25.11 NRC may grant exemptions from the requirements of the regulations of this part upon application by any person or upon its own initiative provided the exemptions are authorized by law, will not present an undue risk to the public health and safety, and are consistent with the common defense and security.

Section 25.23 Upon receipt of the notification of original grant of access authorization, the licensee or organization shall obtain an executed SF 312, “Classified Information Nondisclosure Agreement” from the affected individual. An employee issued an initial access authorization shall execute an SF-312 before being granted access to classified information. The licensee or other organization shall forward the executed SF-312 to the CSA for retention. If the employee refuses to execute the SF-312, the licensee or other organization shall deny the employee access to classified information and submit a report to the CSA. The SF-312 must be signed and dated by the employee and witnessed.

The employee’s and witness’ signatures must bear the same date. The individual shall also be given a security orientation briefing in accordance with 10 CFR 95.33. Based on past experience, no individual has refused to execute

the SF 312. Therefore, no burden is expected for this report. Records of access authorization grant and renewal notification must be maintained by the licensee or other organization for 3 years after the access authorization has been terminated by the CSA.

The reports and information required by this section ensure that only individuals who have agreed to properly protect classified information have access to such information. The maintenance of access authorization grant and renewal letters permits review and confirmation during prescribed NRC surveys that only properly authorized employees have had access to classified information. This recordkeeping requirement ensures these records are available for review by NRC inspectors and that they can be compared against records held by the NRC Division of Facilities and Security. The records under this section must be kept for 3 years following the access authorization termination date.

Section 25.25 When a request for an individual's access authorization or renewal of access authorization is withdrawn or canceled, the requestor shall immediately notify the CSA by telephone so that the personnel security investigations, or other action may be discontinued. The requestor shall identify the full name and date of birth of the individual, the date of request, and the type of access authorization or access authorization renewal requested. The requestor shall confirm each telephone notification promptly in writing.

The information required by this section is necessary each time a licensee or other organization wishes to withdraw or cancel an access authorization or access authorization renewal they have requested. The information is used by NRC to terminate its processing of the individual and to notify the investigating agency that the investigation may also be canceled. This action saves the U.S. Government specific processing costs and curtails unnecessary investigations and invasions of privacy.

Section 25.27(a) In conjunction with a new request for access authorization (NRC Form 237 or CSA equivalent) for individuals whose cases were previously canceled, new fingerprint cards (FD-257) in duplicate and a new NRC Form 176, or CSA equivalents, must be furnished to the CSA along with the request.

Section 25.27(b) This section requires that if 90 days or more have elapsed since the date of the last SF-86, or CSA equivalent, the individual must complete a personnel security packet (see Section 25.17(d)). The CSA, based on investigative or other needs, may require a complete up-to-date personnel security packet in other cases as well.

These procedures and information in Sections 25.27(a) and (b) are used by NRC to reopen and complete the access authorization processing and to determine the respondent’s trustworthiness and eligibility for an access authorization.

Section 25.29(a) An access authorization can be reinstated provided that no more than 24 months has lapsed since the date of termination of the clearance; there has been no break in employment with the employer since the date of termination of the clearance; there is no known adverse information; the most recent investigation does not exceed 5 years; and the most recent investigation meets or exceeds the scope of the investigation required for the level of access authorization that is to be reinstated or granted.

Section 25.29(b) An access authorization can be reinstated at the same, or lower, level by submission of a CSA-designated form to the CSA. The employee may not have access to classified information until an up-to-date personnel security packet is furnished with the request for reinstatement of an access authorization and receipt of written confirmation of reinstatement. A new NRC Form 176 will be obtained in all cases. Where personnel security packets are not required, a request for reinstatement must state the level of access authorization to be reinstated and the full name and date of birth of the individual.

The purpose of this requirement is to provide that information which may be necessary (depending upon when the access authorization was terminated) to reinstate or reactivate the access authorization.

Section 25.31(c) Requests for extension or transfer of access authorization must state the full name of the person, his date of birth, and level of access authorization. The NRC’s Director, Division of Facilities and Security may require a new personnel security packet to be completed by the applicant.

These procedures and requirements provide the necessary information to properly identify and process an individual for an extension or transfer of their access authorization.

Section 25.35(a) This section requires that the number of classified visits must be held to a minimum. The licensee, certificate holder, or other facility shall determine that the visit is necessary and that the purpose of the visit cannot be achieved without access to, or disclosure of, classified information. All classified visits require advance notification to, and approval of, the organization to be visited. In urgent cases, visit information may be furnished by telephone and confirmed in writing. Notifications of visits shall consist of a Visit Authorization Letter (VAL) prepared by the licensee, certificate holder, or others and submitted to the NRC in accordance with Section 25.35(c).

Section 25.35(d) Classified visits may be arranged for a 12-month period. The requesting facility shall notify all places honoring these visit arrangements of any change in the individual’s status that will cause the visit request to be canceled before its normal termination date.

These procedures ensure that only properly authorized individuals who require access to classified matter as a part of their official duties will have such access during visits to other facilities and agencies. They also require the requesting facility to notify places receiving long-term visit requests of any changes in the individual’s status as they occur.

2. Agency Use of Information

Personal history information which is submitted by applicants for access authorizations or access authorization renewal is reviewed, evaluated by NRC’s Division of Facilities and Security personnel, and provided to the Office of Personnel Management (OPM) which conducts background investigations. The NRC reviews the data from these investigations and makes determinations regarding the eligibility of applicants for access or continued access to classified information. Classified visit information is also processed and verified by NRC’s Division of Facilities and Security personnel. If the information collection was not conducted, individuals would not be permitted access to NRC classified information or be permitted to make visits involving NRC classified information.

3. Reduction of Burden Through Information Technology

There are no legal obstacles to reducing the burden associated with this information collection. The NRC encourages respondents to use new automated information technology when it would be beneficial to them. NRC issued a regulation (68 FR 58791) on October 10, 2003, consistent with the Government Paperwork Elimination Act, which allows its licensees, vendors, applicants, and members of the public the option to make submissions electronically via

CD-ROM, e-mail, special Web-based interface, or other means. It is estimated that approximately 95% of the potential responses are filed electronically.

4. Effort to Identify Duplication and Use Similar Information

No sources of similar information are available. There is no duplication of requirements. NRC has in place an ongoing program to examine all information collections with the goal of eliminating all duplication and/or unnecessary information collections.

5. Effort to Reduce Small Business Burden

None of the licensees affected qualify as small business enterprises or entities.

6. Consequences to Federal Program or Policy Activities if the Collection Is Not Conducted or Is Conducted Less Frequently

If the information is collected less frequently, the assurance that only appropriately cleared individuals have access to NRC classified information is reduced, which may endanger the U.S. common defense and national security. Classified information may be compromised if furnished to individuals without an access authorization or an out-of-date access authorization.

7. Circumstances Which Justify Variation from OMB Guidelines

There is no variation from OMB Guidelines in this collection of information.

8. Consultations Outside the NRC

Opportunity for public comment on the information collection requirements for this clearance package was published in the Federal Register on March 23, 2016 (81 FR 15574). In addition, four licensee companies (Scana, Dominion, General Electric, and Urenco were contacted by email. One comment was received from Mark Monks at General Electric during the public comment period.

Comment:

Mr. Monks recommended to change the requirement for fingerprints for reinvestigations, to not require additional fingerprint cards unless the reinvestigation is the first time being processed by the NRC.

Response:

NRC recently discontinued the requirement for licensee companies to submit fingerprints for reinvestigations. The FD-258 fingerprint cards are only required if there are no prior prints on file for the NRC. The licensee companies were notified of this new process by email on June 7, 2016.

9. Payment or Gift to Respondents

Not applicable.

10. Confidentiality of the Information

Confidential and proprietary information is protected in accordance with NRC regulations at 10 CFR 9.17 (a) and 10 CFR 2.390 (b).

11. Justification for Sensitive Questions

Sensitive information collected includes questions on the SF-86 about such matters as firings from a job, criminal history record, and use of illegal drugs (authorized under OMB No. 3206-0007), and is used as the basis for an investigation; the social security number on the NRC Form 237 (authorized under OMB No. 3150-0050) is used to ensure accuracy of these records; and the name, date, and place of birth of the individual’s spouse and the spouse’s immediate relatives on the NRC Form 354 (authorized under OMB

No. 3150-0026) are used as a basis for an investigation.

12. Estimated Burden and Burden Hour Cost

The burden estimates for 10 CFR Part 25 information collection requirements are based on submittals to NRC in past years and NRC staff experience. During January 2013 through December 2015 time period, NRC received an estimated 330 requests per year. NRC staff estimates that in the next three years the burden will increase due to the new five year requirement for reinvestigations.

The cost to the licensees is calculated at a rate of $47 per hour for clerical staff and $268 per hour for professional staff preparation of the reports prepared in response to 10 CFR Part 25 information collection requirements. These rates are based on NRC’s fee rate and include both salaries and overhead; the clerical rate is estimated.

The total annual burden and cost for complying with the information collection requirements in 10 CFR Part 25 is estimated to be about 158 (111 reporting + 47 recordkeeping) hours at $42,344 (158 hrs x $268/hr) See Tables 1 and 2.

13. Estimate of Other Additional Costs

The NRC has determined that the quantity of records to be maintained is roughly proportional to the recordkeeping burden and, therefore, can be used to calculate approximate records storage costs. Based on the number of pages maintained for a typical clearance, the records storage cost has been determined to be equal to 0.0004 times the recordkeeping burden cost. Because the recordkeeping burden is estimated to be 47 hours, the storage cost for this clearance is $5.04 (47 hours x 0.0004 x $268/hour).

14. Estimated Annualized Cost to the Federal Government

The professional effort associated with these requirements includes reviewing the SF-86 and electronically submitting it to OPM for an investigation via the internet through the e-QIP system. Reviewing other personnel security forms required for access authorization processing; evaluating reports of developments

which may affect continued eligibility for access authorization; and renewing, reinstating or transferring access authorizations. The estimated cost to the Federal Government for professional effort is based on current and past experience under 10 CFR Part 25.

436 hours x $268 per hour = $116,848

(4 hours per case x 109 = 436 hours x $268 = $116,848)

The clerical effort associated with these requirements includes requesting background investigations required for access authorizations; which includes initiating applicants into the e-QIP system, pre-screening documents for accuracy, scanning, processing name changes, processing visit requests; and canceling and terminating access authorization requests. The estimated cost to the Federal Government for clerical effort is based on current and past experience under 10 CFR Part 25.

218 hours x $47 per hour = $10,246

(2 hours per case x 109 = 218 hours x $47 = $10,246) The annual cost for the record holding requirements is: 1 cubic feet x $209/cubic feet = $209

Total annual cost = $127,303

($116,848/professional + $10,246/clerical + $209 record holding = $127,303)

The records are held in the Division of Facilities and Security, Personnel Security Branch (PSB) secure vault and stored within PSB Personnel Security Adjudication Tracking System (PSATS).

These costs are recovered through fee assessments to NRC licensees pursuant to 10 CFR Parts 170 and/or 171.

15. Reasons for Changes in Burden or Cost

The overall burden for this clearance has decreased from 365 hours and 918 responses in the previous renewal to 158 hours and 330 responses per year in this clearance cycle. The decrease is due to the licensee companies gradually reduced the amount of requests submitted and because of a breach within the Office of Personnel Management, which caused a delay with investigation submission. The professional cost per hour, which is based on the NRC’s annual fee rate under 10 CFR Parts 170 and 171 has decreased from $274 per hour to

$268 per hour.

16. Publication for Statistical Use

There is no application of statistics in the information collected. There is no publication of this information.

17. Reason for Not Displaying the Expiration Date

The requirement will be contained in a regulation. Amending the Code of Federal Regulations to display information that, in an annual publication, could become obsolete would be unduly burdensome and too difficult to keep current.

18. Exceptions to the Certification Statement

Not applicable.

2. COLLECTIONS OF INFORMATION EMPLOYING STATISTICAL METHODS Not applicable.

TABLE 1

10 CFR PART 25 REPORTING BURDEN ESTIMATE

Section	Requirement	No. of Rspdnts		No. of Responses Per Rspdnt		Total Annual Responses		Burden Hours Per Responses		Total Burden Hours		Cost to Rspdnt $268/Hr
25.11	Exemption Request	0		0		0		0		0		0
25.23	Notification of grant of access authorization SF-312	78		2.6		203		.5		102		27,336
25.25	Access Authorization Cancellation	4		2.5		10		.15		2.0		536
25.27(a)&(b)	Reopening Canceled Requests	0		0		0		0		0		0
25.29(a)&(b)	Access Authorization Reinstatement	2		5.5		11		.15		2.0		536
25.31(c)	Extension or Transfer of Access Authorization	4		1		4		.15		1.0		268
25.35(a)	Classified Visits	8		3		24		.15		4.0		1,072
25.35(d)	Classified Visits – Changes	0		0		0		0		0		0

Totals 15 252 1.1 111 $29,748

TABLE 2

10 CFR PART 25 RECORDKEEPING BURDEN ESTIMATE

Section Recordkeeping	Requirement/Record Retention	No. of Rcrdkprs	Hours Per Rcrdkpr	Total Annual Burden Hours	Cost to Rspndnt $268/Hr
25.23	Notification of Access Authorization Approval (3 yrs)	78	.6	47	12,596
Totals			.6	47	12,596

Total Overall Number of Responses = 330 {252 Total Responses for reporting + 78 Recordkeepers}

Total Reporting and Recordkeeping Burden Hours = 158 {111 Total Reporting hrs + 47 Total Recordkeeping hrs} Total Number of Respondents = 78

Total Cost to Respondent = $42,344 {$29,748 reporting + 12,596 recordkeeping}