Skip to main content

Nuclear Regulatory Commission

Jump To:

Recent Reports

View More Reports

Open Recommendations (19 total)

High-Risk Radioactive Material: Opportunities Exist to Improve the Security of Sources No Longer in Use

GAO-24-105998
Show
1 Open Recommendations
Agency Affected Recommendation Status
Nuclear Regulatory Commission The Chairman of the NRC should comprehensively assess leading practices that, if implemented, would minimize the time that disused sources are in a licensee's possession. These practices include financial assurances for all category 1, 2, and 3 sources; tracking of category 3 sources; possession time limits or fees for disused sources; and orphan source funds. (Recommendation 3)
Open
As of March 2024, this recommendation has not been implemented. We will follow-up with the agency and update the status of the recommendation when we have additional information.

Nuclear Security: NRC Has Enhanced the Controls of Dangerous Radioactive Materials, but Vulnerabilities Remain

GAO-16-330
Show
1 Open Recommendations
1 Priority
Agency Affected Recommendation Status
Nuclear Regulatory Commission
Priority Rec.
Because some quantities of radioactive materials are potentially dangerous to human health if not properly handled, NRC should take action to better track and secure these materials and verify the legitimacy of the licenses for those who seek to possess them. Specifically, the NRC should at least until such time that category 3 licenses can be verified using the License Verification System, require that transferors of category 3 quantities of radioactive materials confirm the validity of a would-be purchaser's radioactive materials license with the appropriate regulatory authority before transferring any category 3 quantities of licensed materials.
Open
In October 2016, NRC issued a Staff Requirements Memorandum (SRM) "Proposed Staff Re-Evaluation of Category 3 Source Accountability," (SRM-COMJMB-16-0001) and directed NRC staff to take specific actions to evaluate whether it is necessary to revise NRC regulations or processes governing source protection and accountability for category 3 sources. Among other things, this re-evaluation considered GAO's recommendations. In August 2017, NRC staff completed its analysis and provided recommendations to the NRC Commissioners. (Most of this analysis is available on NRC's website.) In its analysis, the NRC staff recommended not requiring transferors of category 3 quantities of radiological material to confirm the validity of licenses prior to transferring any category 3 quantities of these materials. In December 2021, NRC issued SECY-17-0083: Re-Evaluation of Category 3 Source Security and Accountability in Response to SRM-COMJMB-16-0001. This SRM recommends requiring licensees transferring category 3 quantities of radioactive material to verify licenses through the Licensee Verification System (LVS) or by calling the Agreement State office. If NRC were to take action, it would fully address this recommendation. However, the process must undergo a public comment period and NRC officials are uncertain when the rulemaking will be completed.

Cybersecurity: Federal Agencies Made Progress, but Need to Fully Implement Incident Response Requirements

GAO-24-105658
Show
1 Open Recommendations
Agency Affected Recommendation Status
Nuclear Regulatory Commission The Chairman of the Nuclear Regulatory Commission should ensure that the agency fully implements all event logging requirements as directed by OMB guidance. (Recommendation 18)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Nuclear Security: NRC Has Enhanced the Controls of Dangerous Radioactive Materials, but Vulnerabilities Remain

GAO-16-330
Show
1 Open Recommendations
Agency Affected Recommendation Status
Nuclear Regulatory Commission Because some quantities of radioactive materials are potentially dangerous to human health if not properly handled, NRC should take action to better track and secure these materials and verify the legitimacy of the licenses for those who seek to possess them. Specifically, the NRC should, as part of the ongoing efforts of NRC working groups meeting to develop enhancements to the prelicensing requirements for category 3 licenses, consider requiring that an on-site security review be conducted for all unknown applicants of category 3 licenses to verify that each applicant is prepared to implement the required security measures before taking possession of licensed radioactive materials.
Open
In October 2016, NRC issued a Staff Requirements Memorandum (SRM) "Proposed Staff Re-Evaluation of Category 3 Source Accountability," (SRM-COMJMB-16-0001) and directed NRC staff to take specific actions to evaluate whether it is necessary to revise NRC regulations or processes governing source protection and accountability for category 3 sources. Among other things, this re-evaluation considered GAO's recommendations. In August 2017, NRC staff completed its analysis and provided recommendations to the NRC Commissioners. (Most of this analysis is available on NRC's website.) In its analysis, the NRC staff recommended requiring all safety and security equipment to be in place before granting a license to a previously unknown entity. This requirement would apply to all unknown entities applying for a radioactive material license regardless of the quantity of licensed material requested. In December 2021, NRC issued SECY-17-0083: Re-Evaluation of Category 3 Source Security and Accountability in Response to SRM-COMJMB-16-0001. This SRM recommends requiring that safety and security equipment to be in place before granting a license for an unknown entity in order to address the concern related to obtaining a valid license using a fictitious company or by providing false information. If NRC were to take action, it would fully address this recommendation. However, the process must undergo a public comment period and, as of March 2024, NRC officials were uncertain when the rulemaking will be completed.

Nuclear Power Plants: NRC Should Take Actions to Fully Consider the Potential Effects of Climate Change

GAO-24-106326
Show
1 Open Recommendations
Agency Affected Recommendation Status
Nuclear Regulatory Commission The Chair of the NRC should direct NRC staff to assess whether its licensing and oversight processes adequately address the potential for increased risks to nuclear power plants from climate change. (Recommendation 1)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Nuclear Regulatory Commission: NRC Needs to Improve Its Cost Estimates by Incorporating More Best Practices

GAO-15-98
Show
1 Open Recommendations
1 Priority
Agency Affected Recommendation Status
Nuclear Regulatory Commission
Priority Rec.
To improve the reliability of its cost estimates, as NRC revises its cost estimating procedures, the NRC Chairman should ensure that the agency aligns the procedures with relevant cost estimating best practices identified in the GAO Cost Estimating and Assessment Guide and ensure that future cost estimates are prepared in accordance with relevant cost estimating best practices.
Open
NRC generally agreed with the recommendation. NRC updated a draft of its cost estimating procedures in January 2020 to conform with agency-wide directives and provided it to the NRC Commissioners for their review. However, as of March 2024, NRC has not issued the final procedures. To fully implement this recommendation, NRC needs to issue its update to its cost estimating procedures to align with best practices identified in our cost estimating guide. By doing so, NRC will have better assurance that its cost estimates are reliable and that the NRC Commissioners have adequate information on which to base their regulatory decisions.

Nuclear Power Plants: NRC Should Take Actions to Fully Consider the Potential Effects of Climate Change

GAO-24-106326
Show
2 Open Recommendations
Agency Affected Recommendation Status
Nuclear Regulatory Commission The Chair of the NRC should direct NRC staff to develop, finalize, and implement a plan to address any gaps identified in its assessment of existing processes. (Recommendation 2)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Nuclear Regulatory Commission The Chair of the NRC should direct NRC staff to develop and finalize guidance on incorporating climate projections data into relevant processes, including what sources of climate projections data to use and when and how to use climate projections data. (Recommendation 3)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Preventing a Dirty Bomb: Vulnerabilities Persist in NRC's Controls for Purchases of High-Risk Radioactive Materials

GAO-22-103441
Show
1 Open Recommendations
1 Priority
Agency Affected Recommendation Status
Nuclear Regulatory Commission
Priority Rec.
The Chairman of NRC should immediately require that vendors verify category 3 licenses with the appropriate regulatory authority. (Recommendation 1)
Open
When the report was issued, NRC stated in their agency comments that they agreed with requiring vendors to verify category 3 licenses with the appropriate regulatory agency and had begun rulemaking that would require such verification. As of March 2024, the rulemaking was with the NRC Commission and agency officials told us that they were uncertain when the rulemaking would be finalized.

Preventing a Dirty Bomb: Vulnerabilities Persist in NRC's Controls for Purchases of High-Risk Radioactive Materials

GAO-22-103441
Show
1 Open Recommendations
1 Priority
Agency Affected Recommendation Status
Nuclear Regulatory Commission
Priority Rec.
The Chairman of NRC should add security features to its licensing process to improve its integrity and make it less vulnerable to altering or forging licenses. These security features could include multifactor authentication or moving away from paper licenses to electronic-based licensing. (Recommendation 2)
Open
When the report was issued, NRC stated in their agency comments that they agreed with considering enhanced security features in the licensing process. Specifically, as part of their ongoing rulemaking process, they would consider providing guidance to regulators and licensees that would reduce the potential for altered or forged licenses to be used in acquiring category 3 radioactive sources. The NRC staff also explored the security features suggested by GAO as an interim step for licenses for category 3 quantities of material. The NRC evaluated the advantages and disadvantages of features such as two factor authentication, non-fungible tokens, data tokens, and QR codes. Tokenization and QR codes demonstrated the most promise of security improvement within reasonable implementation cost. According to NRC, a path towards adoption of this security feature has been developed, and integration into Web-based Licensing system will begin in 2024.
View More Recommendations

Related Pages