NA70-DEL-NACIO-2017, Redelegation to the Associate Administrator for Information Management and Chief Information Officer

1. 2. NATIONAL NUCLEAR SECURITY ADMINISTRATION REDELEGATION ORDER NO. 00-003.03-02A NA70-DEL-NACIO-2017 TO THE ASSOCIATE ADMINISTRATOR FOR INFORMATION MANAGEMENT AND CHIEF INFORMATION OFFICER DELEGATION. Under the authorities and responsibilities vested in me pursuant to section 3232 of the National Nuclear Security Administration (NNSA) Act (50 U.S.C. 2422) and Delegation Order No. 00-003 .03A, and the authority pursuant to my delegation, I delegate to the Associate Administrator for Information Management and Chief Information Officer authority to take the following actions: 1.1 To serve as the as the Officially Designated Federal Security Authority (ODFSA) for NNSA cybersecurity, pursuant to the requirement in Department of Energy Security policies. 1.2 In this capacity, you will be responsible for the development and implementation of cybersecurity programs, operations, and facilities under the purview of NNSA, including the authority to oversee compliance within authorized management authority as prescribed by law, Executive Order, or Departmental Policy and directives. 1.3 To allow the Chief, Defense Nuclear Security to fulfill assigned statutory responsibilities, you will routinely report on and obtain concurrence as appropriate for decisions in the following areas: A. Any significant changes to NNSA cybersecurity policy and/or guidance affecting the security posture of classified or unclassified information systems. B. Any risks associated with a significant cybersecurity incident and/or critical emerging threats affecting NNSA information systems. C. Planning, programming, budgeting, and execution for NNSA's cybersecurity budget. D. Annual NNSA site assessments of cybersecurity programs. E. Any NNSA cybersecurity policy, guidance, initiative, or issue that requires coordination with physical security programs. F. Development of NNSA cybersecurity strategic plans. G. Results and corrective actions associated with major inspection activities ( e.g., Office of Inspector General; Office of Health, Safety and Security; Government Accountability Office, etc.) RESCISSION. Delegation Order No. 00-003.03-02 and all other existing delegations on this subject. Diane Cross-Out 3. LIMITATION. 3.1 In exercising the authority delegated in this Order, the delegate shall be governed by the rules and regulations of the Department of Energy, the National Nuclear Security Administration, and the policies and procedures prescribed by the Secretary and Under Secretary for Nuclear Security/ Administrator. 3.2 Nothing in this Order precludes the Under Secretary for Nuclear Security/ Administrator from exercising any of the authority delegated by this Order. 3.3 Nothing in this Order shall be construed to supersede or otherwise interfere with the authorities provided to the NNSA Administrator by law or delegation. 3 .4 Any amendments to this Order shall be made in consultation with the NNSA General Counsel. 4. AUTHORITY TO REDELEGATE. I authorize you to delegate cybersecurity responsibilities to your Chief Information Security Officer or equivalent senior Federal security manager. Further delegation of cybersecurity responsibilities is prohibited. Redelegation must conform to the requirements in NNSA Business Operating Procedure (BOP)-00.03, Delegation and Designation of Authority. Copies of re-delegations shall be provided to the Chief, Defense Nuclear Security and the NNSA' s Office of Business Services. 5. DURATION AND EFFECTIVE DATE. 5.1 5.2 All actions pursuant to any authority delegated prior to this Order or pursuant to any authority granted by this Order taken prior to and in effect on the date of this Order are ratified and remain in force as if taken under this Order, unless or until rescinded, amended or superseded. This Order is effective (g I 1 / J.o I]