1

Streamlining NMMSS Data Submission

James C. CrabtreeOffice of Health, Safety and Security

U.S. Department of EnergyMay 20, 2009

2

Germantown Challenges

• NMMSS Production System – DOS/FoxPro to Windows/SQL Server

• Cyber Security Issues

• Office of Classification Request – Update Classification Methodology

• New Set of Physical Security and Operations Procedures

• New Personnel

3

Data Submission Germantown Transition Challenges

• Some of the issues– Systems/Software/Equipment– Communicating new mailing addresses,

phone numbers, SIMEX routing address, e-mail addresses

– Distribution of UserIDs and Password– New Cyber Security Plans

4

Current Data Submission

Methods for Germantown

• Classified– Mail– Fax– Bulletin Board System– E-mail

• SecureNet

– SIMEX

• Unclassified– Mail– Fax– Bulletin Board System– Encrypted e-mail

5

Mail and Faxfor Germantown

• No real issues• New addresses – Call if you need the classified address

or fax• Unclassified Mail Fax

U.S. Department of Energy 301-903-1998Attn: NMMSS Program, HS-1.22Germantown Bldg.1000 Independence Ave, SWWashington, DC 20585

• Mark packages – Media Enclosed Do Not X-Ray

6

E-mail

• Classified – SecureNet, managed by NNSA – If your site/facility has SecureNet, you can submit

data and receive reports using SecureNet

• Unclassified, Encrypted– Entrust– Verisign– Encryption Software that meets Federal Information

Processing Standard (FIPS) 140-2 Level 1 or higher– SafeNet – ProtectPack, one possibility

7

NMMSS Staff Contacts

Name Telephone E-mail

Mary McConnell 301-903-6140 mary.mcconnell@hq.doe.gov

Debbie Larabay 301-903-6148 deborah.larabay@hq.doe.gov

Mike Nightingale 301-903-1328 michael.nightingale@hq.doe.gov

Pat Smith 301- 903-6860 patriciaR.smith@hq.doe.gov

Ron Bonifay 301-903-6884 ronald.bonifay@hq.doe.gov

Gary Hirsch 301-903-6870 gary.hirsch@hq.doe.gov

Len Myers 301-903-2180 len.myers@hq.doe.gov

Mitch Hembree 301-903-6299 mitch.hembree@hq.doe.gov

Jim Crabtree 301-903-6008 james.crabtree@hq.doe.gov

8

SIMEX

• NMMSS SIMEX routing address “RHEGGTN “

• Sites moving away from using SIMEX • Many of the sites have old hardware and

software• Older sites systems can’t print newer pdf

files• Currently, Germantown is scanning in

reports page by page to transmit them

9

Unclassified Bulletin Board System

• Software and System Upgrade

• Cyber Security Issues

• Other Issues – Communications

• No Problems at Present

10

Classified Bulletin Board System

• Software and System Upgrade

• Cyber Security Issues

• Document Requirements

• Other Issues - Connecting and Logging In

11

Classified Bulletin Board System

• Documents we need from you – Formal letter requesting connection– Full names and clearance of users with

access to the remote terminal– Accreditation letter by local approving official – Approved Interconnection Security Agreement

(ISA)– Approved Information System Security Plan

(ISSP) for your remote terminal

12

Classified Bulletin BoardSystem Issues

• STE/STU configuration; Exchange STU/STE information

• Getting New UserIDs and Passwords to Users

• Getting connection to work • Speed of modem connection• Getting user logon screen to popup when

user connects

13

Future Data Submissionto Germantown

• SIPRNET. Let us know if you are interested.

• TAC Lanes – for classified data

• Direct Connection to NMMSS database for classified users

• Direct internet connection for submitting unclassified data and downloading reports

14

Customer Input About Data Submission

• Which methods work best?• What is feasible for you?• What do you see as the best long term options?• Contact me with your suggestions• Jim Crabtree,

– 301-903-6008– james.crabtree@hq.doe.gov