IR 05000390/2015404

NRC Inspection of Unit 2 Cyber Security Milestones, (Inspection Report No. 05000391/2015406), Inspection of Unit 1 & Unit 2 Review of Power Reactor Target Sets, (Inspection Report No. 05000390/2015404) & Enforcement Discretion

ML15154A920
Person / Time
Site:	Watts Bar
Issue date:	06/01/2015
From:	Scott Shaeffer NRC/RGN-II/DRS/EB2
To:	James Shea Tennessee Valley Authority
References
IR 2015404 (U1), IR 2015406 (U2)
Download: ML15154A920 (6)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 June 1, 2015 Mr. Joseph Vice President, Nuclear Licensing Tennessee Valley Authority 1101 Market Street, LP 3D-C Chattanooga, TN 37402-2801 SUBJECT: WATTS BAR NUCLEAR PLANT NRC INSPECTION OF UNIT 2 CYBER SECURITY MILESTONES, (INSPECTION REPORT NO. 05000391/2015406),

INSPECTION OF UNIT 1 & UNIT 2 REVIEW OF POWER REACTOR TARGET SETS, (INSPECTION REPORT NO. 05000390/2015404), AND ENFORCEMENT DISCRETION

Dear Mr. Shea:

On April 17, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite activities associated with the inspection at your Watts Bar Nuclear Plant, Units 1 and 2. On April 17, 2015, the NRC inspectors discussed the preliminary results of this inspection with Mr. K. Walsh, Watts Bar, Unit 1 Site Vice President, and other members of your staff. The team performed an exit meeting via telephone on May 27, 2015 to discuss the results of the inspection. The team documented the results of this inspection in the enclosed report.

The inspection examined activities conducted under your license as they relate to safety and compliance with the commissions rules and regulations and with the conditions of your license related to the implementation of interim cyber security milestones and target sets. This inspection also examined activities conducted under your Unit 2 construction permit as they relate to safety and compliance with the Commissions rules and regulations, the conditions of your construction permit, and fulfillment of Unit 2 regulatory framework commitments. The inspection of Unit 2 was conducted in accordance with NRC Temporary Instruction (TI)

2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7 issued January 1, 2015. A previous inspection of the Unit 1 Cyber Security Program was conducted in July 2014. The Unit 1 & Unit 2 inspection activities relevant to Target Set (TS) reviews were conducted in accordance with NRC Inspection Procedure 71130.14, Review of Power Reactor Target Sets. The inspection reviewed Unit 1 Target Set procedures and available draft Unit 2 Target Sets.

Based on the results of this inspection, the NRC has determined that one Severity Level IV violation of NRC requirements occurred. The NRC has also identified seven issues that were evaluated under the significance determination process (SDP) as having very low security significance (Green). The NRC has determined that these findings have violations associated with these issues. However, because of their very low safety significance and because they were entered into your corrective action program (CAP), the NRC is treating these findings as non-cited violations (NCVs), consistent with Section 2.3.2 of the NRC Enforcement Policy. Six of the issues above were discussed at the security issues forum (SIF) meeting on May 13, 2015. Based upon the meeting, the NRC is not taking enforcement action for two of the violations relevant to 10 CFR 73.54 because they meet the criteria established in an NRC Memorandum from Barry C. Westreich, Director, Cyber Security Directorate, Office of Nuclear Security and Incident Response, to each regional office and Director, Division of Reactor Safety, Subject: Enhanced Guidance for Licensee Near-Term Corrective Actions to Address Cyber Security Inspection Findings and Licensee Eligibility for Good-Faith Attempt Discretion dated July 1, 2013 (ADAMS Accession Number ML13178A203). Upon completion of all corrective actions, you are requested to provide written notification to the NRCs regional office as to the method and date of closure for the identified issue(s).

If you contest the violations or significance of the findings discussed in the report, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region II; the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC Resident Inspector at Watts Bar Nuclear Plant, Units 1 & 2. If you disagree with a cross-cutting assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the Regional Administrator, Region II; and the NRC resident inspector at the Watts Bar Nuclear Plant, Unit 1 and Unit 2.

In accordance with 10 CFR 2.390 of the NRCs Rules of Practice, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of the NRCs Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and security-related information is necessary to provide an acceptable response, please mark your entire response Security-Related InformationWithhold from Public Disclosure under 10 CFR 2.390, in accordance with CFR 2.390(d)(1), and follow the instructions for withholding in 10 CFR 2.390(b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,

/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Docket No. 50-390, 50-391 License No.: NPF-90 Construction Permit No: CPPR-92 Enclosure:

Inspection Report No. 05000390/2015404 AND 05000391/2015406 w/ Attachment: Supplementary Information (Official Use Only - Security Related Information)

cc: (See page 4) _ML14027A724________________ SUNSI REVIEW COMPLETE FORM 665 ATTACHED RII:DRS OFFICE RII:DRS RII:DRS CONTRACTOR RII:DRS RII:DRP ADMIN RII:DRS SIGNATURE RJF2 JJP3 MXS17 MJS MFK1 JYC SMS NAME R.FANNER J.PATEL M.SHINN M.SINGLETARY M. KING CALLOWAY S. SHAEFFER DATE 5/ 29 /2015 5/29 /2015 5/ 27 /2015 5/ 28 /2015 6/1 /2015 6/1 /2015 6/1/2015 E-MAIL COPY? YES NO YES YES NO YES NO YES YES NO YES NO N

OFFICE NSIR:STSB NSIR:CSD SIGNATURE MJM3 VIA PHONE NAME M. MALEY DATE 6/1/2015 6/ /2015 6/ /2015 6/ /2015 6/ /2015 6/ /2015 6/ /2015 E-MAIL COPY? YES NO YES YES NO YES NO YES YES NO YES NO N cc:

Mr. Ken T. Walsh, Sr.

Site Vice President Watts Bar Nuclear Plant Tennessee Valley Authority Watts Bar Nuclear Plant P. O. Box 2000, ADM 1V-WBN Spring City, TN 37381 Mr. Michael D. Skaggs Senior Vice President Watts Bar Operations & Construction Tennessee Valley Authority P.O. Box 2000, EQB 1B-WBN (NP91)

Spring City, TN 37381 Mark Fencl Director, Security Operations Tennessee Valley Authority 1101 Market Street, EB 10B-C Chattanooga, TN 37402-2801 B. D. Jacques Manager, Site Security Operations Watts Bar Nuclear Plant Highway 68, Near Spring City (1270 Nuclear Plant Road)

Spring City, TN 37381 Letter to Joe Shea from Scott M Shaeffer dated June 1, 2015.

SUBJECT: WATTS BAR NUCLEAR PLANT NRC INSPECTION OF UNIT 2 CYBER SECURITY MILESTONES, (INSPECTION REPORT NO. 05000391/2015406),

INSPECTION OF UNIT 1 & UNIT 2 REVIEW OF POWER REACTOR TARGET SETS, (INSPECTION REPORT NO. 05000390/2015404), AND ENFORCEMENT DISCRETION Distribution:

M. Layton, NSIR (hard copy w/ encl)

N. Coleman, OE (hard copy w/encl)

J. Rogge, RI DRS B. Daley, RIII, DRS G. Werner, RIV, DRS R. Haag, RII, DCP RIDSNRRDIRS Distribution w/o Encl:

PUBLIC