IR 05000259/2015404

NRC Temporary Instruction 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7 (NRC Inspection Report No. 05000259/2015404, 05000260/2015404 and 05000296/2015404) OUO Removed

ML15237A426
Person / Time
Site:	Browns Ferry
Issue date:	08/24/2015
From:	Scott Shaeffer NRC/RGN-II/DRS/EB2
To:	James Shea Tennessee Valley Authority
References
IR 2015404
Download: ML15237A426 (5)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 August 24, 2015 Mr. Joseph Vice President, Nuclear Licensing Tennessee Valley Authority 1101 Market Street, LP 3R-C Chattanooga, TN 37402-2801 SUBJECT: BROWNS FERRY NUCLEAR PLANT UNITS 1, 2, AND 3 - NRC TEMPORARY INSTRUCTION 2201/004, INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7 (NRC INSPECTION REPORT NO.

05000259/2015404, 05000260/2015404, AND 05000296/2015404)

Dear Mr. Shea:

On July 17, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite activities associated with the inspection at your Browns Ferry Nuclear Plant Units 1, 2, and 3.

The enclosed report documents the results of this inspection, which were discussed on July 17, 2015, with Mr. Steve Bono, and other members of your staff.

The inspection examined activities conducted under your license as they relate to safety and compliance with the commissions rules and regulations and with the conditions of your license related to the implementation of interim cyber security milestones. The inspection was conducted in accordance with NRC Temporary Instruction (TI) 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7, Rev. 1, issued December 22, 2014.

Three findings of very low safety significance (Green) which were determined to involve violations of NRC requirements were identified during this inspection. Further, three licensee identified violations, of very low safety significance (Green) are also listed in this report. These issues were discussed at the Security Issues Forum panel on August 19, 2015. Based upon the meeting, the NRC is not pursuing enforcement action, consistent with the SIF Charter, due to your good-faith attempt to interpret and implement Interim Cyber Security Milestones 1 - 7 commitments. This discretion applies to licensees who have tried to implement the new requirements, but failed to be in full compliance. Before discretion is considered or granted for any issue, licensees must accept the finding, place the finding into their Corrective Actions Program (CAP), and take appropriate corrective action to restore compliance in a timely manner. Upon completion of all corrective actions, you are requested to provide written notification to the NRCs regional office as to the method and date of closure for the identified issue(s).

If you contest the violations or significance of the findings discussed in the report, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region II; the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC Resident Inspector at Browns Ferry Nuclear Plant.

In accordance with Title 10 of the Code of Federal Regulation (10 CFR) 2.390 of the NRC's

"Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's Agencywide Document Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security-Related Information is necessary to provide an acceptable response, please mark your entire response "Security-Related Information - Withhold from public disclosure under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390 (b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,

/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Docket Nos.: 50-259. 50-260, 50-296 License Nos.: DPR-33, DPR-52, DPR-68 Enclosure:

Inspection Report 05000259/2015404, 05000260/2015404, and 05000296/2015404 w/Attachment: Supplementary Information cc: (See page 3) ______________ SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS NSIR/CONTRACTOR RII:DRS RII:DRP SIGNATURE MJS PB FP SMS CRK1 NAME SINGLETARY BRAATEN PRIESTER SHAEFFER CKONTZ DATE 8/24/2015 8/24/2015 8/ 24/2015 8/24/2015 8/24/2015 8/ /2015 8/ /2015 E-MAIL COPY? YES NO YES NO YES NO YES NO YES YES NO YES NO cc:

Mr. Jamie L. Paul Manager, Site Licensing Browns Ferry Nuclear Plant Tennessee Valley Authority P.O. Box 2000, SAB 2B-BFN Decatur, AL 35609 Mr. Steven M. Bono Site Vice President Browns Ferry Nuclear Plant P.O. Box 2000, NAB 2A-BFN Decatur, AL 35609 Mr. Fred E. Marcussen Director, Nuclear Security Tennessee Valley Authority 1101 Market Street, EB 10B-C Chattanooga, Tennessee 37402-2801 Patrick L. Parker Manager, Site Security Operations Browns Ferry Nuclear Plant Tennessee Valley Authority 10835 Shaw Road Athens, AL 35611 Letter to Joseph from Scott M. Shaeffer dated August 24, 2015.

SUBJECT: BROWNS FERRY NUCLEAR PLANT UNITS 1, 2, AND 3 - NRC TEMPORARY INSTRUCTION 2201/004, INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7 (NRC INSPECTION REPORT NO.

05000259/2015404, 05000260/2015404, AND 05000296/2015404)

Distribution:

M. Layton, NSIR (hard copy w/encl)

G. West, Jr., NSIR (hard copy w/encl)

E. Wharton, NSIR (hard copy w/encl)

N. Simonian, NSIR, NSIR (hard copy w/encl)

N. Coleman, OE (Hard copy w/encl)

RIDSNRRDIRS Distribution w/o encl:

Public