In accordance with 5 CFR 1320, the information collection is approved for three years. However, since this is a one-time collection, the Agency is reminded to discontinue it once it has been conducted.
Inventory as of this Action
Requested
Previously Approved
04/30/2018
36 Months From Approved
720
0
0
1,800
0
0
0
0
0
The NRC is seeking to better understand the cyber security threats confronting medical, industrial, and academic users of Category 1 and 2 radioactive materials. This information will be gathered utilizing a questionnaire or set of questionnaires issued to the different types of byproduct materials licensees. This is a voluntary information request.
This is a new collection that would result in an increase of 1,800 burden hours for a one-time voluntary survey. The NRC is requesting information on the potential vulnerabilities and risks associated with digital devices and digital systems utilized by a cross-section of byproduct materials licensees. This information will be gathered utilizing a voluntary questionnaire to be sent to all NRC and Agreement State byproduct materials licensees that possess Category 1 or 2 radioactive materials, and is estimated to take 1,800 hours. Results from this assessment will inform the NRC's evaluation of the cyber security environment for each of the different groups of byproduct materials licensees and help form the basis for future NRC actions (e.g., issue orders, engage in rulemaking).
On behalf of this Federal agency, I certify that the collection of information encompassed by this request complies with 5 CFR 1320.9 and the related provisions of 5 CFR 1320.8(b)(3).
The following is a summary of the topics, regarding the proposed collection of information, that the certification covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control number;
If you are unable to certify compliance with any of these provisions, identify the item by leaving the box unchecked and explain the reason in the Supporting Statement.