IR 05000263/2017409

Inspection of the Cyber Security Full Implementation; Inspection Report 05000263/2017409 - Cover Letter Only (DRS-G.Hausman)

ML17349A180
Person / Time
Site:	Monticello
Issue date:	12/15/2017
From:	Robert Daley Division of Reactor Safety III
To:	Church C Nuclear Management Co
References
IR-2017409
Download: ML17349A180 (3)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION ber 15, 2017

SUBJECT:

MONTICELLO NUCLEAR GENERATING PLANTINSPECTION OF THE CYBER SECUITY FULL IMPLEMENTATION; INSPECTION REPORT 05000263/2017409

Dear Mr. Church:

On September 29, 2017, the U.S. Nuclear Regulatory Commission (NRC) completed a Cyber Security Inspection at your Monticello Nuclear Generating Plant. The inspection evaluated full implementation of your Cyber Security Program, as outlined in your approved Cyber Security Plan and described in Inspection Procedure 71130.10P, Cyber Security, Revision 0. The enclosed inspection report documents the inspection results, which were discussed on November 3, 2017, with Mr. Kent Scott and other members of your staff.

The inspection examined activities conducted under your license as they relate to safety and compliance with the Commissions rules and regulations and with the conditions of your license.

The inspectors reviewed selected procedures and records, observed activities, and interviewed personnel.

One NRC-identified findings of very-low security significance (Green) was identified during this inspection. The finding was determined to involve a violation of NRC requirements. Further, two licensee-identified violations which were determined to be of very-low security significance (Green) are listed in Section 4OA7 of this report. The NRC is treating these violations as Non-Cited Violations consistent with Section 2.3.2 of the Enforcement Policy. These issues were discussed and reviewed during the Security Issues Forum Panel meeting conducted on October 26, 2017.

If you contest the violations or significance of these Non-Cited Violations, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555 0001; with copies to the Regional Administrator, Region III; the Director, Office of Enforcement; and the NRC resident inspector at the Monticello Nuclear Generating Plant.

Enclosure contains Sensitive Unclassified Non-Safeguards Information. When separated from enclosure, this transmittal document is decontrolled. If you disagree with a cross-cutting aspect assignment or a finding not associated with a regulatory requirement in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region III; and the NRC resident inspector at the Monticello Nuclear Generating Plant.

This letter will be made available for public inspection and copying at http://www.nrc.gov/reading-rm/adams.html and at the NRC Public Document Room in accordance with 10 CFR 2.390, Public Inspections, Exemptions, Requests for Withholding.

However, the enclosed report contains Security-Related Information, so the enclosed report will not be made publically available in accordance with 10 CFR 2.390(d)(1). If you choose to provide a response that contains Security-Related Information, please mark your entire response Security-Related Information-Withhold from public disclosure under 10 CFR 2.390 in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1). The NRC is waiving the affidavit requirements for your response in accordance with 10 CFR 2.390(b)(1)(ii).

Sincerely,

/RA/

Robert C. Daley, Chief Engineering Branch 3 Division of Reactor Safety Docket No. 50-263 License No. DPR-22 Non-Public Enclosure:

IR 05000263/2017409 cc w/encl: Kevin Nyberg, Security Manager Stephen Sollmon, Regulatory Affairs cc w/o encl: Distribution via LISTSERV