IR 05000321/2017405

NRC Cyber Security Follow Up Inspection (Inspection Report 05000321/2017405 and 05000366/2017405) - Letter Only

ML17081A502
Person / Time
Site:	Hatch
Issue date:	03/16/2017
From:	Scott Shaeffer NRC/RGN-II/DRS/EB2
To:	Vineyard D Southern Nuclear Operating Co
References
IR 2017405
Download: ML17081A502 (4)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 March 16, 2017 Mr. David Vice President Southern Nuclear Operating Company, Inc.

Edwin I. Hatch Nuclear Plant 11028 Hatch Parkway North Baxley, GA 31513 SUBJECT: EDWIN I. HATCH NUCLEAR PLANT - NRC CYBER SECURITY FOLLOW UP INSPECTION (INSPECTION REPORT 05000321/2017405 and 05000366/2017405)

Dear Mr. Vineyard:

On February 3, 2017, the U.S. Nuclear Regulatory Commission (USNRC) completed a cyber security follow up inspection utilizing inspection procedure 71152, Problem Identification and Resolution (PI&R) for the Edwin I. Hatch Nuclear Plant, Units 1 & 2. These inspection activities were conducted at your Southern Nuclear Corporate (SNC) Office, Birmingham, AL and in-office review in Atlanta, GA. On March 11, 2017 the NRC inspectors discussed the results of this inspection with Mr. S. Baskin and other members of your staff. The enclosed inspection report documents the inspection results.

The NRC inspection team reviewed applicable corrective actions and artifacts generated by your staff to correct deficiencies identified during the Interim Cyber Security Milestone 1 - 7 inspections. Based on the inspection sample, the NRC has determined that completed or planned corrective actions were sufficient to address the performance that led to the findings associated with implementing the Cyber Security Plan (CSP).

No findings of more than minor significance were identified. This letter will be made available for public inspection and copying at http://www.nrc.gov/

reading-rm/adams.html and at the NRC Public Document Room in accordance with 10 CFR 2.390, Public Inspections, Exemptions, Requests for Withholding.

However, the enclosed report contains Security-Related Information, so the enclosed report will not be made publically available in accordance with 10 CFR 2.390(d)(1). If you choose to provide a response that contains Security-Related Information, please mark your entire response Security-Related Information-Withhold from public disclosure under 10 CFR 2.390 in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1). The NRC is waiving the affidavit requirements for your response in accordance with 10 CFR 2.390(b)(1)(ii).

Sincerely,

/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Docket Nos.: 50-321, 50-366 License Nos.: DPR-57 and NPF-5 Enclosure:

Inspection Reports 05000321/2017405 and 05000366/2017405 w/Attachment:

Supplemental Information (OUO)

cc: (See page 3) cc:

Stephen P. McGavin Southern Nuclear Operating Co., Inc.

40 Inverness Center Parkway Bin B042 Birmingham, AL 35242 Michael P. Long, Fleet Nuclear Security Operations Manager Southern Nuclear Operating Co., Inc.

40 Iverness Center Parkway Bin B042 Birmingham, AL 35242 Lisa B. Hogg Fleet Security Project Manager Southern Nuclear Operating Co., Inc.

40 Inverness Center Parkway BIN B042 Birmingham, AL 35242 Steven M. Shipman Southern Nuclear Operating Co., Inc.

40 Iverness Center Parkway Birmingham, AL 35201-1295 _________________________ SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS RII:DRS RII:DRP SIGNATURE RJF2 MJS6 SMS SRS5 NAME RFANNER MSINGLETARY SSHAEFFER SSANDAL DATE 3/14/2015 3/15/2017 3/16/2017 3/15/2017 E-MAIL COPY? YES NO YES NO YES NO YES NO YES NO YES NO YES NO