NMMSS Data Submission Methods 2010 Update James C. Crabtree Office of Health, Safety and Security U.S. Department of Energy

Conceptually The NMMSS Program Relies on Three Big Components  NMMSS Production System  Site/Facility Systems  Data Submission and Report Distribution System  Data Submission/Report Distribution Shared IT and/or Security Responsibilities 2

Data Submission Transition Challenges From Last Year  Some of the issues Systems/Software/Equipment Communicating new mailing addresses, phone numbers, SIMEX routing address, addresses Distribution of UserIDs and Password New Cyber Security Plans 3

Data Submission Methods  Classified Mail Fax Bulletin Board System –SecureNet SIMEX 4  Unclassified Mail Fax Bulletin Board System Encrypted

Mail and Fax for Germantown 5  No real issues  New addresses – Call if you need the classified address or fax Unclassified Mail Fax U.S. Department of Energy Attn: NMMSS Program, HS-1.22 Germantown Bldg Independence Ave, SW Washington, DC  Mark packages – Media Enclosed Do Not X-Ray

6  Classified SecureNet, managed by NNSA If your site/facility has SecureNet, you can submit data and receive reports using SecureNet  Unclassified, Encrypted Entrust Verisign

NMMSS Staff Contacts 7 NameTelephone Mary Debbie Mike Pat Smith301- Gary Len Mitch John

SIMEX 8  Managed by IM-621  Modernization Plan Out for Comment  Outlook Like Interface is Planned

Unclassified Bulletin Board System (BBS) 9  New Software and New Systems  New User IDs and Passwords  Exploring Replacing BBS with WebServrer Replaces modem line connection with encrypted internet connection Advantage Speed of Connection, Eliminates Modem, Improves Quality of the Interface

Classified Bulletin Board System 10  New Software and New System  Issues: Cyber Security Requirements Sustainability/Software Interface Modem Speed  Like to Replace STE Connections with TACLANE connections  TACLANE high-speed encryption device

Classified Bulletin Board System 11  Documents we need from you Formal letter requesting connection Full names and clearance of users with access to the remote terminal Accreditation letter by local approving official Approved Interconnection Security Agreement (ISA) Approved Information System Security Plan (ISSP) for your remote terminal

Classified Bulletin Board System 12  Set STE configuration; exchange STE information  Provide User IDs and passwords  Get connection to work  Issue speed of modem connection

Suggestion from Steve Battle 13  Data Submission Technologies Interest Group  Communicates to users which technologies NMMSS is considering adopting  Communicates to NMMSS program what technologies work best for the users  Makes recommendations on which technologies to adopt

Summary 14  Multiple Data Submission Options  Most DOE users Classified –SIMEX or SecureNet Unclassified –Entrust  UDL and CDL are becoming outmoded/especially CDL  Interest Group - Data Submission Technologies