IR 05000272/2015404

IR 05000272/2015404, 05000311/2015404; 08/03/2015 to 08/07/2015; Salem Nuclear Generating Station Units 1 and 2; Temporary Instruction 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7; Letter Only

ML15237A405
Person / Time
Site:	Salem
Issue date:	08/25/2015
From:	Rogge J Engineering Region 1 Branch 3
To:	Braun R Public Service Enterprise Group
References
IR 2015404
Download: ML15237A405 (4)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION

REGION I

2100 RENAISSANCE BLVD., SUITE 100 KING OF PRUSSIA, PA 19406-2713 August 25, 2015 Mr. Robert Braun President and Chief Nuclear Officer PSEG Nuclear LLC - N09 P.O. Box 236 Hancocks Bridge, NJ 08038 SUBJECT: SALEM NUCLEAR GENERATING STATION, UNIT NOS. 1 AND 2 -

TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7," REPORT 05000272/2015404 AND 05000311/2015404

Dear Mr. Braun:

On August 7, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed a security temporary instruction inspection at your Salem Nuclear Power Station. The inspection covered the implementation of interim milestones associated with your cyber security program, as outlined in your approved cyber security plan. The enclosed inspection report documents the inspection results, which were discussed on August 7, 2015, with Mr. Christopher Schwarz, Vice President Corporate Operations, and other members of your staff.

The inspection examined activities conducted under your license as they relate to security and compliance with the Commissions rules and regulations and with the conditions of your license related to the implementation of interim cyber security milestones. The inspection was conducted in accordance with NRC Temporary Instruction (TI) 2201/004, "Inspection of Implementation of Interim Cyber Security Milestones 1-7." The team reviewed selected procedures and records, observed activities, and interviewed personnel.

The report documents three violations for which the NRC is exercising enforcement discretion.

The NRC is not taking enforcement action for these violations because they meet the criteria established in an NRC Memorandum from Barry C. Westreich, Director, Cyber Security Directorate, Office of Nuclear Security and Incident Response, to each regional office and Director, Division of Reactor Safety, Subject: Enhanced Guidance for Licensee Near-Term Corrective Actions to Address Cyber Security Inspection Findings and Licensee Eligibility for

"Good-Faith" Attempt Discretion, dated July 1, 2013 (Agencywide Documents Access and Management System (ADAMS) Accession Number ML13178A203). Consistent with the NRC Memorandum, upon completion of all corrective actions, you are requested to provide written notification to the NRC's regional office as to the date of closure for the identified issues.

Enclosure contains Sensitive Unclassified Non-Safeguards Information. When separated from enclosure, the transmittal document is decontrolled. In accordance with Title 10 of the Code of Federal Regulations (10 CFR) 2.390 of the NRC's

"Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's ADAMS. ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room). However, the material enclosed herewith contains Security-Related Information (SRI) in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security-Related Information (SRI) is necessary to provide an acceptable response, please mark your entire response "Security-Related Information - Withhold From Public Disclosure Under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390 (b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,

/RA/

John F. Rogge, Chief Engineering Branch 3 Division of Reactor Safety Docket Nos. 50-272 and 50-311 License Nos. DPR-70 and DPR-75 Enclosure:

Inspection Report 05000272/2015404 and 05000311/2015404 w/Attachment: Supplemental Information cc: Distribution via ListServ cc w/encl; w/OUO-SRI:

PTocci, Director of Security PBaldauf, Director, NJ Radiation Protection Programs FFisher-Tyler, Administrator, Office of Radiation Control, DE Division of Public Health ML15237A405 (Cover letter) ADAMS ACCESSION NUMBER: ML15237A401 (Cover letter w/enclosure)

Non-Public Designation Category: MD 3.4 Non-Public A.3 Cover Letter X Non-Sensitive X Publicly Available SUNSI Review Sensitive Non-Publicly Available Cover Letter w/Enclosure Non-Sensitive Publicly Available SUNSI Review X Sensitive X Non-Publicly Available OFFICE RI/DRS RI/DRS NAME JRichmond/ JRogge/

DATE 08/25/15 08/25/15 Letter to Mr. Robert Braun from John F. Rogge SUBJECT: SALEM NUCLEAR GENERATING STATION, UNIT NOS. 1 AND 2 - TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7," REPORT 05000272/2015404 AND 05000311/2015404 DISTRIBUTION w/o encl; w/o OUO-SRI DDorman, RA (R1ORAMAIL Resource)

DLew, DRA (R1ORAMAIL Resource)

MScott, DRP (R1DRPMAIL Resource)

JColaccino, DRP (R1DRPMAIL Resource)

RLorson, DRS R1DRSMAIL Resource)

GSuber, DRS (R1DRSMAIL Resource)

GDentel, DRP RBarkley, DRP MDraxton, DRP CHighley, DRP PFinney, DRP, SRI AZiedonis, DRP RI SHorvitz, DRP, RI COtt, DRP, AA KMorganButler, RI, OEDO RidsNrrPMSalem Resource RidsNrrDorlLpl1-2 Resource ROPreports Resource DISTRIBUTION w/encl; w/OUO-SRI JWillis, NSIR NSimonian, NSIR EWharton, NSIR SShaeffer, DRS, RII RDaley, DRS, RIII GWerner, DRS, RIV GDentel, DRP PFinney, DRP