Implementation of performance testing to support an insider vulnerability assessment at the Savannah River Site

Category 1 and 2 facilities must have an insider vulnerability assessment (VA) developed per DOE Order 5633.3A. This VA identifies the critical system elements that must be tested by the performance testing program. Once this VA is developed and all necessary upgrades to the critical system elements are implemented, the upgrades must be performance tested (PT). Per DOE Order 5633.3A, each facility has a safeguards an security system to provide defense-in-depth. The safeguards and security system assures that the level of risk is not increased if a single element is defeated. The VA determines both the amount of risk associated with a single critical element and if the increase in risk is acceptable. Compensatory measures and upgrades to the critical system elements are made when the increase in risk exceeds an acceptable level. This paper will describe the methodology used to performance test compensatory measures and upgrades resulting from an insider VA for a Category 1 process facility at the Savannah River Site. Outsider threats are not considered in this paper. They are the responsibility of the Protective Force and are performance tested by that organization