COMPLIANCE INFO_2021 - Laserfiche WebLink

Home Browse Search

LLNL Emergency Management Plan(EPlan) Rev 26 January 2021 1.3.6 Operational Emergency Termination and Recovery The emergency will be terminated by the ED when the emergency condition is stabilized and with the input of the IC and, if activated, the Emergency Management Team and offsite decision- makers. This concurrence assures there is no longer a threat to employee safety, the public, the environment, or national security. See Section 11 of this Emergency Plan for emergency termination and recovery. Once categorized, an Operational Emergency must not be downgraded to a lower significance category unless the original categorization was incorrect. An event determined to be an Operational Emergency will remain so until the emergency response is terminated. In general, the classification(i.e., Alert, Site Area Emergency, or General Emergency) of a hazardous material Operational Emergency should not be downgraded until termination of the event. However, classification must be reviewed periodically by the EOC to ensure the classification is commensurate with response activities. 1.3.7 Emergencies Caused by Cyber Attacks With respect to LLNL Information Technology(IT) system networks, both classified and unclassified, there are a variety of human-caused intentional activities that may pose a threat event to these networks, such as a cyber attack against critical infrastructure at LLNL. The LLNL Cyber Security Program Plan establishes the policies and practices utilized at LLNL to address cyber incidents and intentional attacks on LLNL IT networks. Response to cyber attacks is coordinated in accordance with the LLNL Cyber Security Program Plan and managed by the Cyber Security Program within the LLNL Office of the Chief Information Officer. Specific responses are further covered by the Network System Protection and Monitoring team in accordance with their emergency response handling procedures. If the consequences of a cyber attack impact critical LLNL infrastructure or activities and cause events that are deemed a significant emergency or an Operational Emergency(see Section 5.1), the emergency response aspects of the cyber attack will be responded to in accordance with this Emergency Plan and applicable procedures and NNSA's Information Conditions (INFOCON) guidance which identifies attack levels and LLNL actions of computer network attacks and computer network exploitation conditions. 1.4 Site Description 1.4.1 Overview Including Function and Mission LLNL is operated and managed by LLNS, LLC. LLNS is a limited liability company managed by the University of California; Bechtel National, Inc.; BWX Technologies, Inc.; Amentum, and Battelle Memorial Institute. 12