Slide 1

LLNL-PRES-658863 Lawrence Livermore National Laboratory is operated by Lawrence Livermore National Security, LLC, for the U.S. Department of Energy, National Nuclear Security Administration under Contract DE- AC52-07NA27344.

Slide 2

Lawrence Livermore National Laboratory Nuclear Security Culture The assembly of characteristics, attitudes, and behaviors of individuals, organizations, and institutions that serves as a means to support, enhance, and sustain nuclear security INFCIRC/225/Revision 5 Fundamental Principle F All organizations involved in implementing physical protection should give due priority to the security culture, to its development and maintenance necessary to ensure its effective implementation in the entire organization CPPNM Amendment Physical Protection Regime

Slide 3

Lawrence Livermore National Laboratory Security Culture NSS-07 The assembly of characteristics, attitudes, and behaviour of individuals, organizations, and institutions which serves as a means to support and enhance nuclear security. Based upon: Compartmentalization Secrecy/Confidentiality Classification Relies heavily on the trustworthiness, honesty, and integrity of individuals not to perform malicious acts.

Slide 4

Lawrence Livermore National Laboratory Shared principal objective of the protection of people, society, and the environment from the effects of harmful nuclear radiation Shared Attributes: Recognized values Leadership needed for success Accountability Systematic approaches to actions Learning and experience driven Best when fully integrated into the system Both require a coordinated approach

Slide 5

Lawrence Livermore National Laboratory Only as good as people responsible for nuclear security Organizational nuclear security culture is influenced by: International community State regulations Public support Organizational norms Underlying beliefs and attitudes Principles that guide decisions and behaviours Management systems Behaviours of leaders and employees

Slide 6

Lawrence Livermore National Laboratory Administrative measures used in the security culture process: Identify trustworthy employees during pre-employment process Ensure employees understand their security responsibility Select the most trustworthy employees for sensitive positions Minimize opportunities for malevolent action by employees through procedural measures Restrict area access to those needing it for job duties Separation of duties Manage/limit authorities with two person validation Maintain positive work environment Emphasize safety and security integrated awareness in work environment Empower employees to act when questionable circumstances are encountered

Slide 7

Lawrence Livermore National Laboratory Deterrence Cannot quantify effectiveness Detection Insiders may be able to bypass technology Detection of Insiders includes more non-technical means Delay Insiders may be authorized access past many barriers Insiders may have special knowledge and opportunities to defeat barriers Insider protection relies more on non-technical means Response Includes safety, security, and operations Passive insider usually no detection before the act Response to Insider activities generally is by co-workers

Slide 8

Lawrence Livermore National Laboratory Lack of threat awareness Lack of security visibility Different security environment for different people at the same position Security exceptions for managers Disregard for security rules/personnel Ambiguous security roles and responsibilities Poor operational security Lack of quality assurance program Substitution of inferior equipment Unskilled personnel Deficiencies in acceptance testing

Slide 9

Lawrence Livermore National Laboratory Poor record keeping Material inventories Configuration management No, or infrequent, security training, exercises Poor information/cyber security Lack of graded approach Poor documentation Unprotected emails Inadequate password protection Cultural biases Ethnic Traditional

Slide 10

Lawrence Livermore National Laboratory Ernest Moniz: Y-12 National Security Complex Breach Was 'Unacceptable'

Slide 11

Lawrence Livermore National Laboratory "On the same night last week that four robbers shot an emergency officer at Pelindaba" South Africas most important atomic facility "another attempt was made to bypass the nuclear sites security," according to The Sowetan. [11.13.07]

Slide 12

Lawrence Livermore National Laboratory Defined security policies and procedures Well documented Understood Periodic training conducted Pertains to all levels of management Management follows the procedures Employees understand the threat is real and changes in security procedures may be necessary Employees feel empowered to stop work when suspected malevolent actions are observed

Slide 13

Lawrence Livermore National Laboratory Mechanism exists for addressing security concerns Employees understand their security roles Suspicious activity reporting program exists Employees report suspicious activities

Slide 14

Lawrence Livermore National Laboratory Special Consideration - Security Awareness Program A program intended to remind employees of their security roles and responsibilities Usually part of routine periodic employee training Sensitizes employees to watch for and report or interdict potential malevolent actions Spans the spectrum of concerns Cyber, physical protection, MC&A, information, etc. A product of a strong security culture

Slide 15

Lawrence Livermore National Laboratory Implemented using a Graded Approach Usually restricted to persons in job areas which have greater capabilities to commit serious malevolent acts Includes activities such as frequent drug screening, financial reviews, supervisor and co-worker observation Periodic physical and mental evaluations Periodic full background checks A product of a strong security culture

Slide 16

Lawrence Livermore National Laboratory Security culture is based on appropriate behaviors and attitudes essential to nuclear security The behavior of individuals directly involved in security is characterized by: A rigorous, prudent approach; A constant vigilance and a questioning attitude; and A speed of reaction when faced with an unexpected situation The attitude of non-security individuals is characterized by: A knowledge of the principles of protection and taking them into consideration; A compliance with rules and procedures; and A questioning attitude to abnormal acts or events