Common use of Appropriate Use of Government Furnished Information Technology (IT) Equipment and/or its Services/Access Clause in Contracts

Appropriate Use of Government Furnished Information Technology (IT) Equipment and/or its Services/Access. When the NRC work at a DOE site requires electronic processing of information, DOE will follow NIST Special Publication (SP) 800-37 Rev. 1 or later, and SP 800-53 Rev. 3 or later (which are based on FIPS-199 and FIPS-200). For those specific projects with electronic processing of Safeguards Information (SGI), Restricted Data (RD) and/or Unclassified Nuclear Information (UCNI), the NRC shall provide DOE with the appropriate requirements that must be met on a project by project basis. In addition, for those specific projects that require classified electronic information processing, DOE will follow the CNSS policy, directives, instructions, and guidance.

Appropriate Use of Government Furnished Information Technology (IT) Equipment and/or its Services/Access. When the NRC work at a DOE servicing agency site requires electronic processing of information, DOE servicing agency will follow NIST Special Publication (SP) 800-37 Rev. 1 or later, and SP 800-800- 53 Rev. 3 or later (which are based on FIPS-199 and FIPS-200). For those specific projects with electronic processing of Safeguards Information (SGI), Restricted Data (RD) and/or Unclassified Nuclear Information (UCNI), the NRC shall provide DOE servicing agency with the appropriate requirements that must be met on a project by project basis. In addition, for those specific projects that require classified electronic information processing, DOE servicing agency will follow the CNSS policy, directives, instructions, and guidance.

Appropriate Use of Government Furnished Information Technology (IT) Equipment and/or its Services/Access. When the NRC work at a DOE Servicing Agency site requires electronic processing of information, DOE Servicing Agency will follow NIST Special Publication (SP) 800-37 Rev. 1 or later, and SP 800-800- 53 Rev. 3 or later (which are based on FIPS-199 and FIPS-200). For those specific projects with electronic processing of Safeguards Information (SGI), Restricted Data (RD) and/or Unclassified Nuclear Information (UCNI), the NRC shall provide DOE Servicing Agency with the appropriate requirements that must be met on a project by project basis. In addition, for those specific projects that require classified electronic information processing, DOE Servicing Agency will follow the CNSS policy, directives, instructions, and guidance.