IR 05000424/2017405

NRC Cyber Security Follow Up Inspection (Inspection Report 05000424/2017405 and 05000425/2017405)- OUO Information Removed

ML17082A475
Person / Time
Site:	Vogtle
Issue date:	03/16/2017
From:	Scott Shaeffer NRC/RGN-II/DRS/EB2
To:	Taber B Southern Nuclear Operating Co
References
IR 2017405
Download: ML17082A475 (4)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 March 16, 2017 Mr. B. Keith Taber Vice President Southern Nuclear Operating Co., Inc.

Vogtle Electric Generating Plant 7821 River Road Waynesboro, GA 30830 SUBJECT: VOGTLE ELECTRIC GENERATING PLANT - NRC CYBER SECURITY FOLLOW UP INSPECTION (INSPECTION REPORT 05000424/2017405 and 05000425/2017405)

Dear Mr. Taber:

On February 3, 2017, the U.S. Nuclear Regulatory Commission (USNRC) completed a cyber security follow up inspection utilizing inspection procedure 71152, Problem Identification and Resolution (PI&R) for the Vogtle Electric Generating Plant, Units 1 & 2. These inspection activities were conducted at your Southern Nuclear Corporate (SNC) Office, Birmingham, AL and in-office review in Atlanta, GA. On March 11, 2017 the NRC inspectors discussed the results of this inspection with Mr. S. Baskin and other members of your staff. The enclosed inspection report documents the inspection results.

The NRC inspection team reviewed applicable corrective actions and artifacts generated by your staff to correct deficiencies identified during the Interim Cyber Security Milestone 1 - 7 inspections. Based on the inspection sample, the NRC has determined that completed or planned corrective actions were sufficient to address the performance that led to the findings associated with implementing the Cyber Security Plan (CSP).

No findings of more than minor significance were identified. This letter will be made available for public inspection and copying at http://www.nrc.gov/

reading-rm/adams.html and at the NRC Public Document Room in accordance with 10 CFR 2.390, Public Inspections, Exemptions, Requests for Withholding.

However, the enclosed report contains Security-Related Information, so the enclosed report will not be made publically available in accordance with 10 CFR 2.390(d)(1). If you choose to provide a response that contains Security-Related Information, please mark your entire response Security-Related Information-Withhold from public disclosure under 10 CFR 2.390 in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1). The NRC is waiving the affidavit requirements for your response in accordance with 10 CFR 2.390(b)(1)(ii).

Sincerely,

/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Docket No.: 50-424, 50-425 License No.: NPF-68, NPF-81 Enclosure:

Inspection Reports 05000424/2017405 and 05000425/2017405 w/Attachment:

Supplemental Information cc: (See Page 3) cc:

Stephen P. McGavin Fleet Security Director Southern Nuclear Operating Co., Inc.

40 Inverness Center Parkway, Bin B042 Birmingham, AL 35242 Michael P. Long, Fleet Nuclear Security Operations Manager Southern Nuclear Operating Co., Inc.

40 Inverness Center Parkway Bin B042 Birmingham, AL 35242 Lisa B. Hogg Fleet Security Project Manager Southern Nuclear Operating Co. Inc.

40 Inverness Center Parkway, BIN B042 Birmingham, AL 35242 Steven M. Shipman Fleet Security Project Manager Southern Nuclear Operating Co., Inc.

40 Inverness Center Parkway Birmingham, AL 35201-1295 _________________________ SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS RII:DRS RII:DRP SIGNATURE RJF2 MJS6 SMS SRS5 NAME RFANNER MSINGLETARY SSHAEFFER SSANDAL DATE 3/14/2017 3/15/2017 3/16/2017 3/15/2017 3/ /2017 3/ /2017 3/ /2017 E-MAIL COPY? YES NO YES NO YES NO YES NO YES NO YES NO YES NO