IR 05000400/2015404

IR 05000400/2015404, 06/04/2015, Shearon Harris Nuclear Power Plant - Inspection on Interim Cyber Security Milestones 1-7 and Target Set Requirements

ML15197A028
Person / Time
Site:	Harris
Issue date:	07/15/2015
From:	Scott Shaeffer NRC/RGN-II/DRS/EB2
To:	Waldrep B Progress Energy Carolinas
References
IR 2015404
Download: ML15197A028 (6)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 July 15, 2015 Mr. Benjamin Vice President Shearon Harris Nuclear Power Plant 5413 Shearon Harris Rd New Hill, NC 27562-0165 SUBJECT: SHEARON HARRIS NUCLEAR POWER PLANT - INSPECTION OF TARGET SET AND INTERIM CYBER SECURITY MILESTONES 1-7 REQUIREMENTS (NRC INSPECTION REPORT NO. 05000400/2015404)

Dear Mr. Waldrep:

On June 4, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite activities associated with target set and cyber security inspections at the Shearon Harris Nuclear Power Plant. The enclosed report documents the results of these inspections, which were discussed and acknowledged on June 4, 2015, with Mr. Benjamin C. Waldrep, Harris Site Vice President and other members of licensee management.

The inspections examined activities conducted under your license as they relate to safety and compliance with the commissions rules and regulations and with the conditions of your license related to the implementation of target sets and interim cyber security milestones. The inspections were conducted in accordance with Inspection Procedure 71130.14, Review of Power Reactor Target Sets, issued January 1, 2014, and NRC Temporary Instruction (TI)

2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7 Rev 1 issued December 22, 2014.

The enclosed report documents one target set NRC-identified finding, with two examples, of very low security significance (Green), that were determined to involve violations of NRC requirements. The NRC is treating this finding as a non-cited violation (NCV) consistent with Section 2.3.2.a of the Enforcement Policy.

The enclosed report also documents two NRC-identified cyber security findings of very low safety significance (Green), which were also determined to involve violations of NRC requirements. In addition, two licensee-identified violations, of very low safety significance (Green) are documented in this report.

The issues above were discussed at the Security Issue Forum (SIF) meeting on July 8, 2015.

In accordance with the SIF Charter, the NRC exercised enforcement discretion for one cyber security finding based upon the licensees good faith interpretation and attempt to implement the Milestones 1-7 requirements. This discretion is considered or granted based upon the licensee accepting the NRCs characterization of the finding, placing the finding into their Corrective Actions Program (CAP), and taking appropriate corrective action to restore compliance in a timely manner. Upon completion of all corrective actions associated with the cyber security findings, you are requested to provide written notification to the NRCs regional office as to the method and date of closure for the identified issue(s). The NRC is treating the remaining NRC identified cyber security finding as a non-cited violation (NCV) consistent with Section 2.3.2.a of the NRCs Enforcement Policy.

If you contest the violations or significance of the findings discussed in the report, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region II; the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC Resident Inspector at Shearon Harris Nuclear Power Plant.

If you disagree with the cross-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the Regional Administrator, RII, and the NRC Resident Inspector at the Shearon Harris Nuclear Power Plant.

In accordance with 10 CFR 2.390 of the NRCs Rules of Practice, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of the NRCs Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and security-related information is necessary to provide an acceptable response, please mark your entire response Security-Related InformationWithhold from Public Disclosure under 10 CFR 2.390, in accordance with CFR 2.390(d)(1), and follow the instructions for withholding in 10 CFR 2.390(b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,

/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Docket No.: 50-400 License No.: NFP-63 Enclosure:

Inspection Report No. 05000400/2015404 w/ Attachment: Supplementary Information (Official Use Only - Security Related Information)

cc: (See page 4) _________________________ SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS RII: DRS RII:DRS RII:DRP SIGNATURE MJS3 VIA RJF2 VIA JJP3 VIA SMS GTH1 EMAIL EMAIL EMAIL NAME MSINGLETARY RFANNER JPATEL SSHAEFFER GHOPPER DATE 7/15/2015 7/15/2015 7/14/2015 7/14/2015 714/2015 E-MAIL COPY? YES NO YES NO YES NO YES NO YES NO YES NO YES NO cc:

Lynwood Faulk, Manager Nuclear Security Shearon Harris Nuclear Power Plant 5413 Shearon Harris Road New Hill, NC 27562 Letter to Mr. Benjamin from Scott M. Shaeffer dated July 15, 2015 SUBJECT: SHEARON HARRIS NUCLEAR POWER PLANT - INSPECTION OF INTERIM CYBER SECURITY MILESTONES 1-7 AND TARGET SET REQUIREMENTS (NRC INSPECTION REPORT NO. 05000400/2015404)

Distribution:

M. Layton, NSIR (hard copy w/encl)

N. Coleman, OE (hard copy w/encl)

RIDSNRRDIRS Distribution w/o Encl:

PUBLIC