IR 05000324/2015404
| ML15090A446 | |
| Person / Time | |
|---|---|
| Site: | Brunswick  |
| Issue date: | 03/30/2015 |
| From: | Scott Shaeffer Engineering Region 1 Branch 2 |
| To: | William Gideon Progress Energy Carolinas |
| References | |
| IR 2015404 | |
| Download: ML15090A446 (6) | |
Text
March 30, 2015
SUBJECT:
BRUNSWICK STEAM ELECTRIC PLANT UNITS 1 AND 2 - INSPECTION OF INTERIM CYBER SECURITY MILESTONES 1-7 AND TARGET SET REQUIREMENTS (NRC INSPECTION REPORT NO. 05000324/2015404 AND 05000325/2015404)
Dear Mr. Gideon:
On February 13, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite activities associated with cyber security and target set inspections at Brunswick Steam Electric Plant, Units 1 and 2. The enclosed report documents the results of these inspections, which were discussed and acknowledged on February 13, 2015, with Mr. William R. Gideon, Brunswick, Site Vice President and other members of licensee management.
The inspections examined activities conducted under your license as they relate to safety and compliance with the commissions rules and regulations and with the conditions of your license related to the implementation of interim cyber security milestones and target sets. The inspections were conducted in accordance with NRC Temporary Instruction (TI) 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7 Rev 1 issued December 22, 2014, and Inspection Procedure 71130.14, Review of Power Reactor Target Sets, issued January 1, 2014.
In the area of cyber security, two cyber security findings of very low safety significance (Green),
which were determined to involve violations of NRC requirements, were identified during this inspection. In addition, four licensee-identified violations, of very low safety significance (Green)
are listed in this report. However, in accordance with the Security Issue Forum (SIF) Charter, the NRC can exercise enforcement discretion during inspection of the interim cyber security measures for licensees who demonstrate a good faith interpretation and attempt to implement Milestones 1-7. This discretion applies to licensees who have tried to implement the new requirements, but failed to be in full compliance. Before discretion is considered or granted for any issue, licensees must accept the finding, place the finding into their Corrective Actions Program (CAP), and take appropriate corrective action to restore compliance in a timely manner.
The issues above were discussed at the SIF meeting on March 25, 2015. Based upon the meeting, the NRC is not pursuing enforcement action due to your good-faith attempt to interpret and implement Interim Cyber Security Milestones 1 - 7 commitments and because of your prompt corrective actions to enter these issues into your CAP. Upon completion of all corrective actions, you are requested to provide written notification to the NRCs regional office as to the method and date of closure for the identified issue(s).
In the area of target set reviews, the enclosed report documents one target set NRC-identified finding, with three examples, of very low security significance (Green), that were determined to involve violations of NRC requirements. The NRC is treating these violations as non-cited violations (NCVs) consistent with Section 2.3.2.a of the Enforcement Policy.
If you contest the violations or significance of the findings discussed in the report, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region II; the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC Resident Inspector at Brunswick Steam Electric Plant.
If you disagree with the cross-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the Regional Administrator, RII, and the NRC Resident Inspector at the Brunswick Steam Electric Plant.
In accordance with 10 CFR 2.390 of the NRCs Rules of Practice, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of the NRCs Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).
However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and security-related information is necessary to provide an acceptable response, please mark your entire response Security-Related InformationWithhold from Public Disclosure under 10 CFR 2.390, in accordance with CFR 2.390(d)(1), and follow the instructions for withholding in 10 CFR 2.390(b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.
Sincerely,
/RA/
Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety
Docket No.: 50-324, 50-325 License No.: DPR-71, DPR-62
Enclosure:
Inspection Report No. 05000324/2015404 and 05000325/2015404 w/ Attachment: Supplementary Information (Official Use Only - Security Related Information)
cc: (See page 4)
__ML15090A446___________
SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS RII: DRS RII:DRS RII:DRP
SIGNATURE JJP3 ORL MJS6 SMS GTH1
NAME JPATEL OLOPEZ MSINGLETARY SSHAEFFER GHOPPER
DATE 3/302015 3/25/2015 3/24/2015 3/30/2015 3/30/2015
E-MAIL COPY?
YES NO YES NO YES NO YES NO YES NO YES NO YES NO W.Gideon 4 cc:
Lee Grzeck, Manager - Regulatory Affairs Brunswick Steam Electric Plant P.O. Box 10429 Southport, NC 28461-0429
Allen Brittain Manager - Security Brunswick Steam Electric Plant P.O. Box 10429 Southport, NC 28461
Mr. Edward T. ONeil Director Nuclear Protective Services Duke Energy Corporation 526 South Church Street Charlotte, NC 28202 Letter to Mr. William from Scott M. Shaeffer dated March 30, 2015.
SUBJECT:
BRUNSWICK STEAM ELECTRIC PLANT UNITS 1 AND 2 - INSPECTION OF INTERIM CYBER SECURITY MILESTONES 1-7 AND TARGET SET REQUIREMENTS (NRC INSPECTION REPORT NO. 05000324/2015404 AND 05000325/2015404)
Distribution:
M. Layton, NSIR (hard copy w/encl)
N. Coleman, OE (hard copy w/encl)
RIDSNRRDIRS
Distribution w/o Encl:
PUBLIC