IR 05000261/2015405

IR 05000261/2015405; 08/28/2015; H.B. Robinson Steam Electric Plant; U.S. NRC Temporary Instruction 2201/004, "Inspection of Implementation of Interim Cyber Security Milestones 1-7."

ML15282A173
Person / Time
Site:	Robinson
Issue date:	10/08/2015
From:	Shaeffer S M NRC/RGN-II/DRS/EB2
To:	Isgett C Duke Energy Corp
Linda K. Gruhler 404-997-4633
References
IR 2015405
Download: ML15282A173 (5)

Text

October 8, 2015

Mr. Christopher Isgett Director, Nuclear Plant Security H.B. Robinson Steam Electric Plant 3581 West Entrance Road, RNPA02 Hartsville, SC 29550

SUBJECT: H. B. ROBINSON STEAM ELECTRIC PLANT- U.S. NUCLEAR REGULATORY COMMISSION TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7 (INSPECTION REPORT NO. 05000261/2015405)

Dear Mr. Isgett:

On August 28, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite activities associated with the inspection at your H. B. Robinson Steam Electric Plant, Unit 2.

The enclosed report documents the results of this inspection, which were discussed on August 28, 2015, with you and other members of your staff.

The inspection examined activities conducted under your license as they relate to safety and compliance with the Commission's rules and regulations, and with the conditions of your license related to the implementation of interim cyber security milestones. The inspection was conducted in accordance with NRC Temporary Instruction 2201/004, "Inspection of Implementation of Interim Cyber Security Milestones 1-7," Rev. 1, issued December 22, 2014. Two findings of very low safety-significance (Green) which were determined to involve violations of NRC requirements were identified during this inspection. Further, five licensee-identified violations of very low safety-significance (Green) are also listed in this report. These issues were discussed at the Security Issues Forum meeting on September 23, 2015. Based on the meeting, the NRC is not pursuing enforcement action due to your "good-faith" attempt to interpret and implement Interim Cyber Security Milestones 1-7 commitments. This discretion applies to licensees who have tried to implement the new requirements, but failed to be in full compliance. Before discretion is considered or granted for any issue, licensees must accept the finding, place the finding into their Corrective Actions Program, and take appropriate corrective action to restore compliance in a timely manner.Upon completion of all corrective actions, you are requested to provide written notification to the NRC's Regional office as to the method, and date of closure for the identified issue(s).

If you contest the violations or significance of the findings discussed in the report, you should provide a response within 30 days of the date of this inspection report (IR), with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region II; the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-

0001; and the NRC Resident Inspector at Robinson Nuclear Plant. In accordance with Title 10 of the Code of Federal Regulation (10 CFR) 2.390, "Public inspections, exemptions, requests for withholding," of the NRC's "Agency Rules of Practice and Procedure," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room, or from the Publicly Available Records (PARS) component of NRC's Agencywide Documents Access and Management System (ADAMS); accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1), and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the Enclosure will not be made available electronically for public inspection in the NRC Public Document Room, or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security-Related Information is necessary to provide an acceptable response, please mark your entire response "Security-Related Information - Withhold from public disclosure under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1), and follow the instructions for withholding in 10 CFR 2.390 (b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Region II Docket Nos. 50-261 License Nos. DPR-23

Enclosure:

NRC IR 05000261/2015405

w/Attachment:

Supplementary Information cc: (See page 3)