ML093280234

From kanterella
Jump to navigation Jump to search

Request for Approval of the Exelon Cyber Security Plan
ML093280234
Person / Time
Site: Dresden, Peach Bottom, Oyster Creek, Byron, Braidwood, Limerick, Clinton, Quad Cities, LaSalle, Crane
Issue date: 11/23/2009
From: Cowan P
Exelon Generation Co, Exelon Nuclear
To:
Document Control Desk, Office of Nuclear Reactor Regulation
Shared Package
ML093280232 List:
References
Download: ML093280234 (37)


Text

10 CFR 50.90 November 23, 2009 U.S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 Facility Operating License No. NPF-62 NRC Docket No. 50-461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 and 2 Facility Operating License Nos. NPF-11 and NPF-18 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 1 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 ENCLOSURES 2, 3, AND 4 TRANSMITTED HEREWITH CONTAIN SECURITY-RELATED INFORMATION - WITHHOLD UNDER 10 CFR 2.390

U.S. Nuclear Regulatory Commission November 23, 2009 Page 2 Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 NRC Docket Nos. 50-277 and 50-278 Quad Cities Nuclear Power Station, Units 1 and 2 Renewed Facility Operating License Nos. DPR-29 and DPR-30 NRC Docket Nos. 50-254 and 50-265 Three Mile Island Station, Unit 1 Renewed Facility Operating License No. DPR-50 NRC Docket No. 50-289

Subject:

Request for Approval of the Exelon Cyber Security Plan In accordance with the provisions of 10 CFR 50.4 and 10 CFR 50.90, Exelon Generation Company, LLC (Exelon) is submitting a request for an amendment to the Facility Operating Licenses (FOL) for Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1. This proposed amendment requests NRC approval of the Exelon Cyber Security Plan, provides an Implementation Schedule, and adds a sentence to the existing FOL Physical Protection license condition to require Exelon to fully implement and maintain in effect all provisions of the Commission approved Cyber Security Plan.

This proposed amendment conforms to the model application contained in NEI 08-09, Revision 3, submitted to the NRC for endorsement on September 15, 2009.

provides an evaluation of the proposed change. Enclosure 1 also contains the existing FOL pages marked up to show the proposed change. Enclosure 2 provides a copy of the Exelon Cyber Security Plan which is a standalone document that will be incorporated by reference into the Exelon Physical Security Plan upon approval. Enclosure 3 provides a copy of the Exelon Cyber Security Plan proposed Implementation Schedule which contains Exelon regulatory commitments. Enclosure 4 contains an evaluation of deviations from NEI 08-09, Revision 3. Exelon requests that Enclosures 2, 3 and 4, which contain sensitive information, be withheld from public disclosure in accordance with 10 CFR 2.390.

In accordance with 10 CFR 50.91, a copy of this application, with attachments, is being provided to the designated State Officials.

U.S. Nuclear Regulatory Commission November 23, 2009 Page 3 Exelon requests an implementation period of 60 days following NRC approval of the license amendments to implement the FOL amendment. Implementation of the Cyber Security Program will occur in accordance with the proposed commitments of Enclosure 3. If you should have any questions regarding this submittal, please contact Mr. Doug Walker at 610-765-5952.

I declare under penalty of perjury that the foregoing is true and correct. Executed on the 23rd day of November 2009.

Respectfully,

-/'"#j

//

//

lvPamela B.

Director - Licensing and Regulatory Affairs - Evaluation of Proposed Change - Cyber Security Plan For Exelon Nuclear - Exelon Cyber Security Plan Proposed Implementation Schedule - Evaluation of NEI 08-09, Revision 3 Deviations cc:

NRC Project Manager, NRR - Braidwood Station NRC Project Manager, NRR - Byron Station NRC Project Manager, NRR - Clinton Power Station NRC Project Manager, NRR - Dresden Nuclear Power Station NRC Project Manager, NRR - LaSalle County Station NRC Project Manager, NRR - Limerick Generating Station NRC Project Manager, NRR - Oyster Creek Generating Station NRC Project Manager, NRR - Peach Bottom Atomic Power Station NRC Project Manager, NRR - Quad Cities Nuclear Power Station NRC Project Manager, NRR -Three Mile Island Station USNRC Senior Resident Inspector - Braidwood Station USNRC Senior Resident Inspector - Byron Station USNRC Senior Resident Inspector - Clinton Power Station USNRC Senior Resident Inspector - Dresden Nuclear Power Station USNRC Senior Resident Inspector - LaSalle County Station USNRC Senior Resident Inspector - Limerick Generating Station USNRC Senior Resident Inspector - Oyster Creek Generating Station USNRC Senior Resident Inspector - Peach Bottom Atomic Power Station USNRC Senior Resident Inspector - Quad Cities Nuclear Power Station USNRC Senior Resident Inspector -Three Mile Island Station USNRC Region I, Regional Administrator USNRC Region III, Regional Administrator S. T. Gray, State of Maryland Illinois Emergency Management Agency - Division of Nuclear Safety (w/o attachments)

R. R. Janati - Bureau of Radiation Protection, Commonwealth of Pennsylvania (w/o attachments)

Evaluation of Proposed Change Request for Approval of the Exelon Cyber Security Plan 1.0 Summary Description 2.0 Detailed Description 3.0 Technical Evaluation 4.0 Regulatory Evaluation 4.1 Applicable Regulatory Requirements / Criteria 4.2 Significant Hazards Consideration 4.3 Conclusion 5.0 Environmental Consideration 6.0 References ATTACHMENTS - Marked FOL Excerpt Page for Braidwood Station - Marked FOL Excerpt Page for Byron Station - Marked FOL Excerpt Page for Clinton Power Station - Marked FOL Excerpt Page for Dresden Nuclear Power Station - Marked FOL Excerpt Page for LaSalle County Station - Marked FOL Excerpt Page for Limerick Generating Station - Marked FOL Excerpt Page for Oyster Creek Nuclear Generating Station - Marked FOL Excerpt Page for Peach Bottom Atomic Power Station - Marked FOL Excerpt Page for Quad Cities Nuclear Power Station 0 - Marked FOL Excerpt Page for Three Mile Island Station

Evaluation of Proposed Change Page 2 1.0

SUMMARY

DESCRIPTION The proposed license amendment request (LAR) includes the proposed Exelon Generation Company, LLC (Exelon) Cyber Security Plan (Plan), a proposed Implementation Schedule, a proposed sentence to be added to the existing Facility Operating License (FOL) Physical Protection license condition, and an evaluation of deviations from NEI 08-09, Revision 3.

2.0 DETAILED DESCRIPTION The proposed LAR includes four parts: the proposed Plan, a proposed Implementation Schedule, a proposed sentence to be added to the existing FOL Physical Protection license condition to require Exelon to fully implement and maintain in effect all provisions of the Commission approved cyber security plan as required by 10 CFR 73.54, and an evaluation of deviations from NEI 08-09, Revision 3. Federal Register notice issued the final rule that amended 10 CFR Part 73. The regulations in 10 CFR 73.54, "Protection of digital computer and communication systems and networks,"

establish the requirements for a cyber security program. This regulation specifically requires each licensee currently licensed to operate a nuclear power plant under Part 50 of this chapter to submit a cyber security plan that satisfies the requirements of the Rule. Each submittal must include a proposed implementation schedule and implementation of the licensee's cyber security program must be consistent with the approved schedule. The background for this application is addressed by the NRC Notice of Availability published on March 27, 2009, 74 FR 13926 (Reference 6.1). The proposed FOL license condition states:

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from public disclosure in accordance with 10 CFR 2.390.

Also included are editorial changes for Condition 2.F of the Braidwood Station Unit 1 and Unit 2 Facility Operating Licenses, which correct minor typographical errors involving incorrect 10 CFR citations.

3.0 TECHNICAL EVALUATION

Federal Register notice 74 FR 13926 issued the final rule that amended 10 CFR Part

73. Cyber security requirements are codified as new §73.54 and are designed to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks up to and including the design basis threat established by §73.1(a)(1)(v). These requirements are substantial improvements upon the requirements imposed by EA-02-026 (Reference 6.2).

Evaluation of Proposed Change Page 3 This LAR includes the proposed Plan (Enclosure 2) that conforms to the template provided in NEI 08-09, Revision 3, Cyber Security Plan for Nuclear Power Reactors. In addition the LAR includes the proposed change to the existing FOL license condition for "Physical Protection" (Attachments 1 through 10 to this Enclosure). An editorial change has also been included as part of the Braidwood FOL revisions for Unit 1 and Unit 2 which corrects two typographical errors involving incorrect 10 CFR citations. The LAR contains the proposed Implementation Schedule (Enclosure 3) as required by 10 CFR 73.54. Finally, this LAR contains an evaluation of deviations from NEI 08-09, Revision 3 (Enclosure 4).

4.0 REGULATORY EVALUATION

4.1 APPLICABLE REGULATORY REQUIREMENTS / CRITERIA This LAR is submitted pursuant to 10 CFR 73.54 which requires licensees currently licensed to operate a nuclear power plant under 10 CFR Part 50 to submit a Cyber Security Plan as specified in §50.4 and §50.90.

4.2 SIGNIFICANT HAZARDS CONSIDERATION Exelon Generation Company, LLC (Exelon) has evaluated the proposed changes using the criteria in 10 CFR 50.92 and has determined that the proposed changes do not involve a significant hazards consideration. An analysis of the issue of no significant hazards consideration is presented below:

Criterion 1: The proposed change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

The proposed change is required by 10 CFR 73.54 (Rule) and includes four parts. The first part is the submittal of the Cyber Security Plan (Plan) for NRC review and approval.

The Plan conforms to the template provided in NEI 08-09, Revision 3 and provides a description of how the requirements of the Rule will be implemented at Exelon sites.

The Plan establishes the licensing basis for the Exelon Cyber Security Program for Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1. The Plan establishes how to achieve high assurance that nuclear power plant digital computer and communication systems and networks associated with the following are adequately protected against cyber attacks up to and including the Design Basis Threat:

1. Safety-related and important-to-safety functions,
2. Security functions,
3. Emergency preparedness functions including offsite communications, and

Evaluation of Proposed Change Page 4

4. Support systems and equipment which if compromised, would adversely impact safety, security, or emergency preparedness functions.

Part one of the proposed change is designed to achieve high assurance that the systems within the scope of the Rule are protected from cyber attacks. Implementation of the Plan is expected to require plant configuration changes. The Plan describes how plant modifications and tests which involve digital computers and communication systems and networks will be reviewed to provide high assurance of adequate protection against cyber attacks, up to and including the design basis threat as defined in the Rule. Identified changes will be evaluated per 10 CFR 50.59 to determine if a License Amendment is required. Changes will be evaluated per 10 CFR 50.54(q) to determine if the effectiveness of the site Emergency Plan is reduced. Changes will be evaluated per 10 CFR 50.54(p) to determine if the effectiveness of the site Security Plan is reduced. Prior NRC approval will be obtained if required by these evaluations.

The proposed change does not alter accident analysis assumptions, add any initiators, or affect the function of plant systems or the manner in which systems are operated, maintained, modified, tested, or inspected. The first part of the proposed change is designed to achieve high assurance that the system functions within the scope of the Rule are protected from cyber attacks and has no impact on the probability or consequences of an accident previously evaluated. In addition, an editorial change to correct two typographical errors as part of the Braidwood FOL revisions for Unit 1 and Unit 2 is administrative in nature and has no impact on the probability or consequences of an accident previously evaluated.

The second part of the proposed change is an Implementation Schedule. The third part adds a sentence to the existing Facility Operating License (FOL) license condition for Physical Protection. The fourth part adds a deviation table annotating differences from NEI 08-09, Revision 3. These changes are administrative and have no impact on the probability or consequences of an accident previously evaluated.

Therefore, it is concluded that this change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

Criterion 2: The proposed change does not create the possibility of a new or different kind of accident from any accident previously evaluated.

The proposed change is required by 10 CFR 73.54 and includes four parts. The first part is the submittal of the Plan for NRC review and approval. The Plan conforms to the template provided by NEI 08-09, Revision 3 and provides a description of how the requirements of the Rule will be implemented at Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1. The Plan establishes the licensing basis for

Evaluation of Proposed Change Page 5 the Exelon Cyber Security Program for the Exelon Sites. The Plan establishes how to achieve high assurance that nuclear power plant digital computer and communication systems and networks associated with the following are adequately protected against cyber attacks up to and including the Design Basis Threat:

1. Safety-related and important-to-safety functions,
2. Security functions,
3. Emergency preparedness functions including offsite communications, and
4. Support systems and equipment which if compromised, would adversely impact safety, security, or emergency preparedness functions.

Part one of the proposed change is designed to achieve high assurance that the systems within the scope of the Rule are protected from cyber attacks. Implementation of the Plan is expected to require plant configuration changes. The Plan describes how plant modifications and tests which involve digital computers and communication systems and networks will be reviewed to provide high assurance of adequate protection against cyber attacks, up to and including the design basis threat as defined in the Rule. Identified changes will be evaluated per 10 CFR 50.59 to determine if a License Amendment is required. Changes will be evaluated per 10 CFR 50.54(q) to determine if the effectiveness of the site Emergency Plan is reduced. Changes will be evaluated per 10 CFR 50.54(p) to determine if the effectiveness of the site Security Plan is reduced. Prior NRC approval will be obtained if required by these evaluations.

The proposed change does not alter accident analysis assumptions, add any initiators, or affect the function of plant systems or the manner in which systems are operated, maintained, modified, tested, or inspected. The first part of the proposed change is designed to achieve high assurance that the systems within the scope of the Rule are protected from cyber attacks and does not create the possibility of a new or different kind of accident from any previously evaluated. In addition, an editorial change to correct two typographical errors as part of the Braidwood FOL revisions for Unit 1 and Unit 2 is administrative in nature and does not create the possibility of a new or different kind of accident from any previously evaluated.

The second part of the proposed change is an Implementation Schedule. The third part adds a sentence to the existing FOL license condition for Physical Protection. The fourth part adds a deviation table annotating differences from NEI 08-09, Revision 3.

These changes are administrative and do not create the possibility of a new or different kind of accident from any previously evaluated.

Therefore, the proposed change does not create the possibility of a new or different kind of accident from any accident previously evaluated.

Evaluation of Proposed Change Page 6 Criterion 3: The proposed change does not involve a significant reduction in a margin of safety.

The proposed change is required by §73.54 and includes four parts. The first part is the submittal of the Plan for NRC review and approval. The Plan conforms to the template provided by NEI 08-09, Revision 3 and provides a description of how the requirements of the Rule will be implemented at Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1. The Plan establishes the licensing basis for the Exelon Cyber Security Program for the Exelon Sites. The Plan establishes how to achieve high assurance that nuclear power plant digital computer and communication systems and networks associated with the following are adequately protected against cyber attacks up to and including the design basis threat:

1. Safety-related and important-to-safety functions,
2. Security functions,
3. Emergency preparedness functions including offsite communications, and
4. Support systems and equipment which if compromised, would adversely impact safety, security, or emergency preparedness functions.

Part one of the proposed change is designed to achieve high assurance that the system functions within the scope of the Rule are protected from cyber attacks. Plant safety margins are established through Limiting Conditions for Operation, Limiting Safety System Settings and Safety Limits specified in the Technical Specifications. Because there is no change to these established safety margins, the proposed change does not involve a significant reduction in a margin of safety. In addition, an editorial change to correct two typographical errors as part of the Braidwood FOL revisions for Unit 1 and Unit 2 is administrative in nature and has no impact on the margin of safety.

The second part of the proposed change is an Implementation Schedule. The third part adds a sentence to the existing FOL license condition for Physical Protection. The fourth part adds a deviation table annotating differences from NEI 08-09, Revision 3.

These changes are administrative and do not involve a significant reduction in a margin of safety.

Therefore, the proposed change does not involve a significant reduction in a margin of safety.

Based on the above, Exelon concludes that the proposed change presents no significant hazards consideration under the standards set forth in 10 CFR 50.92(c), and accordingly, a finding of no significant hazards consideration is justified.

Evaluation of Proposed Change Page 7

4.3 CONCLUSION

In conclusion, based on the considerations discussed above: (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner; (2) such activities will be conducted in compliance with the Commission's regulations; and (3) the issuance of the amendments will not be inimical to the common defense and security or to the health and safety of the public.

5.0 ENVIRONMENTAL CONSIDERATION

The proposed amendments are confined to (i) organizational and procedural matters; (ii) modifications to systems used for security and/or materials accountability; (iii) administrative changes; and (iv) review and approval of transportation routes pursuant to 10 CFR 73.37. Accordingly, the proposed amendments meet the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(12). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed amendments.

6.0 REFERENCES

6.1 Federal Register Notice, Final Rule 10 CFR Part 73, Power Reactor Security Requirements, published on March 27, 2009, 74 FR 13926 6.2 EA-02-026, Issuance of Order for Interim Safeguards and Security Compensatory Measures, issued February 25, 2002 6.3 NEI 08-09, Revision 3, Cyber Security Plan for Nuclear Power Reactors

, Attachment 1 Marked FOL Excerpt Page for Braidwood Station Braidwood Station Units 1 and 2 LICENSE NOS. NPF-72 NPF-77 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 1 Unit 2

-5 F.

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualifications, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 51 FR 27817 and 27822) and the authority of 10 CFR 50.90 and 10 CFR The comb' d set of plans1, which contain Safeguards Information prot under 10 3.21, is entitled:

"Braidwood Station Security Plan, Training a d Qualification n, and Safeguards Contingency Plan, Revision 3," s bmitted by letter ted May 17, 2006.

G. Deleted H. The licensee shall have and maintain financial protection of such type and in such amounts as the Commission shall require in accordance with Section 170 of the Atomic Energy Act of 1954, as amended, to cover public liability claims.

I.

This license is effective as of the date of issuance and shall expire at midnight on October 17, 2026.

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan SUbmitted by letter dated November 23, 2009 and withheld from pUblic disclosure in accordance with 10 CFR

.390.

Attachments:

FOR THE NUCLEAR REGULATORY COMMISSION original signed by:

Thomas E. Murley, Director Office of Nuclear Reactor Regulation 1.

Appendix A - Technical Specifications (NUREG-1276) 2.

Appendix B - Environmental Protection Plan 3.

Appendix C - Additional Conditions Date of Issuance: July 2, 1987 1 The training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Amendment NO*1 60 Revised by letter dated February 1, 2007 F.

Exelon Generation Company shall fully implement and maintain in effect in all provisions of the Commission-approved physical security, training and qualifications, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.5 51 FR 7817 and 27822) and the authority of 10 CFR 50.90 and 10 CFR The combin d set of plans1, which contain Safeguards information protected under 1 entitled:

"Braidwood Station Security Plan, Training and Qualification n, and Safeguards Contingency Plan, ReviSIon 3," submitted by letter dated May 17, 2006.

G. Deleted xelon Generation Company shall fUlly implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from pUblic disclosure in accordance with 10 CFR

.30.

H. The licensee shall have and maintain financial protection of such type and in such amounts as the Commission shall require in accordance with Section 170 of the Atomic Energy Act of 1954, as amended, to cover public liability claims.

I.

This license is effective as of date of issuance and shall expire at midnight on December 18, 2027.

FOR THE NUCLEAR REGULATORY COMMISSION original signed by:

James H. Sniezek, Deputy Director Office of Nuclear Reactor Regulation Attachments:

1.

Appendix A - Technical Specifications ( NUREG -1276) 2.

Appendix B - Environmental Protection Plan 3.

Appendix C - Additional Conditions Date of issuance: May 20, 1988 1 The training and Qualification Plan Safeguards Contingency Plan are Appendices to the Security Plan.

Amendment No.160 Revised by letter dated February 1, 2007

, Attachment 2 Marked FOL Excerpt Page for Byron Station Byron Nuclear Station Units 1 and 2 LICENSE NOS. NPF-37 NPF-66 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 1 Unit 2

- 4b -

- 4b -

-4b-(22)

Mitigation Strategy license Condition Develop and maintain strategies for addressing large fires and explosions and that include the following key areas:

(a)

Fire fighting response strategy with the following elements:

1.

Pre-defined coordinated fire response strategy and guidance 2.

Assessment of mutual aid fire fighting assets 3.

Designated staging areas for equipment and materials 4.

Command and control 5.

Training of response personnel (b)

Operations to mitigate fuel damage considering the following:

1.

Protection and use of personnel assets 2.

Communications 3.

Minimizing fire spread 4.

Procedures for implementing integrated fire response strategy 5.

Identification of readily-available pre-staged equipment 6.

Training on integrated fire response strategy 7.

Spent fuel pool mitigation measures (c)

Actions to minimize release to include consideration of:

1.

Water spray scrubbing 2.

Dose to onsite responders D.

The facility requires no exemptions from the requirements of 10 CFR Part 50.

E.

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p).

The combined set of plansI, which contain Safeguards Information protected under 10 CFR 7321 ;s entitled: "Byron Nuclear Power Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 3,* submitted by letter dated May 17, 2006.

lThe training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan Exelon Generation ompany shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from public disclosure in accordance with 10 CFR2.390.

Amendment No. t+5 Re'V'ised by letter dated May 15, 2007 Revised by letter dated June 27. 2007

-4b-(c)

Actions to minimize release to include consideration of:

1.

Water spray scrubbing 2.

Dose to onsite responders D.

The facility requires no exemptions from the requirements of 10 CFR Part 50.

An exemption was previously granted pursuant to 10 CFR 70.24. The exemption was granted with NRC materials license No. SNM-1916, issued March 4, 1985, and relieved the licensee from the requirement of having a criticality alarm system. Therefore, the licensee is exempted from the criticality alarm system provision of 10 CFR 70.24 so far as this section applies to the storage of fuel assemblies held under this licensee.

E.

The licensee shall implement and maintain in effect all provisions of the approved fire protection program as described in the licensee's Fire Protection Report and the licensee's letters dated September 23, 1986. October 23. 1986.

November 3, 1986, December 12 and 15,1986, and January 21, 1987, and as approved in the SER dated February 1982 through Supplement No.8, subject to the fol/owing prOVision:

The licensee may make changes to the approved fire protection program without prior approval of the Commission only if those changes would not adversely affect the ability to achieve and maintain safe shutdown in the event of a fire.

F.

Exelon Generation Company shall fully implement and maintain in effect all prOVisions of the Commission-approved physical security, training and qualifications, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search ReqUirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans!,

which contain Safeguards Information protected under 10 CFR 73.21, is entitled:

"Byron Nuclear Power Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 3,* submitted by letter dated May 17, 2006.

G.

Deleted 1The training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23.

2009 and withheld from public disclosure in accordance with 10 CFA 2.390.........._.----..

Amendment No. 146 Revised by letter dated May 1S, 2007 Revised by letter dated June 27. 2007

, Attachment 3 Marked FOL Excerpt Page for Clinton Nuclear Power Station Clinton Nuclear Power Station LICENSE NO. NPF-62 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 1

  • 8*

An exemption was previously granted pursuant to 10 CFR 70.24. The exemption was granted with NRC Material License No. SNM-1886, issued November 27, 1985, and relieved the licensee from the requirement of having a criticality alarm system. Exelon Generation Company is hereby exempted from the criticality alarm system provision of 10 CFR 70.24 so far as this section applies to the storage of fuel assemblies held under this license.

These exemptions are authorized by law, will not present an undue risk to the public health and safety, and are consistent with the common defense and security. The exemptions in items (b) and (c) above are granted pursuant to 10 CFR 50.12. With these exemptions, the facility will operate, to the extent authorized herein, in conformity with the application, as amended, the provisions of the Act, and the rules and regUlations of the Commission.

E.

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFA 50.54(p). The combined set of plans',

which contain Safeguards Information protected under 10 CFR 73.21, is entitled:

"Clinton Power Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 2," submitted by letter dated May 17, 2006.

F.

Exelon Generation Company shall implement and maintain in effect all provisions of the approved fire protection program as described in the Final Safety Analysis Report as amended, for the Clinton Power Station, Unit No.1, and as approved in the Safety Evaluation Report (NUREG-0853) dated February 1982 and Supplement Nos. 1 thru 8 thereto subject to the follOWing provision:

Exelon Generation Company may make changes to the approved fire protection program without prior approval of the Commission only if those changes would not adversely affect the ability to achieve and maintain safe shutdown in the event of a fire.

G.

Deleted.

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by I~tter dated November 23, 2009 and withheld from public disclosure in accordance With 10 CFR 2.390.

Amendment No. 183 Revised by letter dated July 26, 2007

'The Training and Qualification Plan and Saf*aguards Contingency Plan are Appendices to the Security Plan.

, Attachment 4 Marked FOL Excerpt Page for Dresden Nuclear Power Station Dresden Nuclear Power Station Units 2 and 3 LICENSE NOS. DPR-19 DPR-25 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 2 Unit 3 revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans\\ which contain Safeguards Information protected under 10 CFR 73.21, is entitled: "Dresden Nuclear Power Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 2," submitted by letter dated May 17, 2006.

NRC Ltr.

G.

04/11/06 Deleted H.

The licensee shall have and maintain financial protection of such type and in such amounts as the Commission shall require in accordance with Section 170 of the Atomic Energy Act of 1954, as amended, to cover public liability claims.

I.

Updated Final Safety Analysis Report The Exelon Generation Company, LLC Updated Final Safety Analysis Report supplement, submitted pursuant to 10 CFR 54.21 (d), describes certain future activities to be completed prior to the period of extended operation. The Exelon Generation Company, LLC shall complete these activities no later than December 22, 2009, and shall notify the NRC in writing when implementation of these activities is complete and can be verified by NRC inspection.

The Updated Final Safety Analysis Report supplement, as revised, shall be included in the next scheduled update to the Updated Final Safety Analysis Report required by 10 CFR 50.71(e)(4) following issuance of this renewed license. Until that update is complete, Exelon Generation Company, LLC may make changes to the programs and activities described in the supplement without prior Commission approval, provided that Exelon Generation Company, LLC evaluates such change pursuant to the criteria set forth in 10 CFR 50.59 and otherwise complies with the requirements in that section.

J.

All capsules in the reactor vessel that are removed and tested must meet the test procedures and reporting requirements of ASTM E 185-82 to the extent practicable for the configuration of the specimens in the capsule. Any changes to the capsule withdrawal schedule, including spare capsules, must be approved by the NRC prior to implementation. All capsules placed in storage must be maintained for future insertion.

Renewed License No. DPR-19 Amendment 226 Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from public disclosure in accordance with 10 CFR 1 The Training and QualIfication Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

F.

The licensee shall maintain the commitments made in response to the March 14, 1983, NUREG-0737 Order, subject to the following provision:

The licensee may make changes to commitments made in response to the March 14, 1983, NUREG-0737 Order without prior approval of the Commission as long as the change would be permitted without NRC approval, pursuant to the requirements of 10 CFR 50.59. Consistent with this regulation, if the change results in an Unreviewed Safety Question, a license amendment shall be submitted to the NRC staff for review and approval prior to implementation of the change.

G.

The licensee shall implement and maintain in effect all provisions of the approved fire protection program as described in the Updated Final Safety Analysis Report for the facility and as approved in the Safety Evaluation Reports dated March 22, 1978 with supplements dated December 2,1980, and February 12,1981; January 19,1983; July 17,1987; September 28,1987; and January 5,1989, subject to the following provision:

The licensee may make changes to the approved fire protection program without prior approval of the Commission only if those changes would not adversely affect the ability to achieve and maintain safe shutdown in the event of a fire.

NRC Ltr H.

05/16/07 Physical Protection The licensee shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, which contain Safeguards Information protected under 10 CFR 73.21, is entitled: "Dresden Nuclear Power Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 2," submitted by letter dated May 17, 2006.

I.

Deleted Exelon Generation Company shall fUlly implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from public disclosure in accordance CFR 2.390.

Deleted Deleted [Amdt. 87, 7-24-86]

Deleted J.

K.

L.

1 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Renewed License No. DPR-25 Revised by letter dated May 16, 2007

, Attachment 5 Marked FOL Excerpt Page for LaSalle County Station LaSalle County Station Units 1 and 2 LICENSE NOS. NPF-11 NPF-18 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 1 Unit 2

Am. 194 08128109 Am. 127 06110198 (24)

DELETED (25)

Fire Protection Program 08128109 License No. NPF-11 The licensee shall implement and maintain all provisions of the approved Fire Protection Program as described in the Final Safety Analysis Report for LaSalle County Station, and as approved in NUREG-0519, "Safety Evaluation Report related to the operation of LaSalle County Station, Units 1 and 2," dated March 1981; Supplement 2 dated February 1982; Supplement 3 dated April 1982; Supplement 5 dated August 1983; Supplement 7 dated December 1983; Supplement 8 dated March 1984; and SERs for the following:

LaSalle Unit 1 License Amendment 1, dated June 18, 1982; LaSalle Unit 1 License Amendment 18, dated August 8, 1984; LaSalle Unit 1 License Amendment 23, dated May 22, 1985; LaSalle Unit 1 License Amendment 44, dated June 20, 1986; LaSalle Unit 1 License Amendment 127, dated June 10, 1998; and NRC Evaluation of the Consequences of Postulated Failures of 1 Hour Fire Rated Darmatt KM-1 Fire Barrier under Seismic Loading at LaSalle County Station, dated March 29, 1996.

The Licensee may make changes to the approved Fire Protection Program without prior approval of the Commission only if those changes would not adversely affect the ability to achieve and maintain safe shutdown in the event of a fire.

Am. 14 5105183 Letter dated 05116107 (26)

DELETED (27)

Industrial Security (Section 13.6, SER, SSER #3)

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, which contain Safeguards Information protected under 10 CFR 73.21, is entitled: "LaSalle County Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 5," submitted by letter dated May 17, 2006.

The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

08/28/09 License No. NPF-18 Letter dated 05/16/07 (16)

Industrial Security (Section 13.6, SER, SSER #3, SSER #5)

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, which contain Safeguards Information protected under 10 CFR 73.21, is entitled: "LaSalle County Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 5," submitted by letter dated May 17, 2006.

Am. 181 (17) 08/28/09 Am. 181 08/28/09 Am. 181 08/28/09 Am. 181 08/28/09 Am. 133 03/30101 (18)

DELETED (19)

DELETED (20)

DELETED (21)

Deleted.

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter date~

November 23, 2009 and withheld from public disclosure in accordance with 10 CFR 2.390.

Am. 132 01/12/01 Am. 132 01/12/01 (22)

EGC shall provide the Director of the Office of Nuclear Reactor Regulation a copy of any application, at the time it is filed, to transfer (excluding grants of security interests or liens) from EGC to its direct or indirect parent, or to any other affiliated company, facilities for the production, transmission, or distribution of electric energy having a depreciated book valve exceeding ten percent (10%) of EGC's consolidated net utility plant, as recorded on EGC's books of account.

(23)

EGC shall have decommissioning trust funds for LaSalle, Unit 2, in the following minimum amount, when LaSalle, Unit 2, is transferred to EGC:

LaSalle, Unit 2

$221,885,059 1 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

, Attachment 6 Marked FOL Excerpt Page Limerick Generating Station Limerick Generating Station Units 1 and 2 LICENSE NOS. NPF-39 NPF-85 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 1 Unit 2 life or property or the common defense and security and are otherwise in the public interest. Therefore these exemptions are hereby granted pursuant to 10 CFR 50.12 and 50.47(c). With the granting of these exemptions the facility will operate, to the extent authorized herein, in conformity with the application, as amended, the provision of the Act, and the rules and regulations of the Commission.

E.

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, submitted by letter dated May 17, 2006, is entitled:

"Limerick Generating Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 2." The set contains Safeguards Information protected under 10 CFR 73.21.

"--4 F.

Deleted G.

The licensee shall have and maintain financial protection of such type and in such amounts as the Commission shall require in accord-ance with Section 170 of the Atomic Energy Act of 1954, as amended, to cover public liability claims.

H.

This license is effective as of the date of issuance and shall expire at midnight on October 26, 2024.

FOR THE NUCLEAR REGULATORY COMMISSION original signed by Darrell Eisenhut for Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated Novem.ber 23 2009 and withheld from public di~closure in accordance with 10 CFR 2.390.

Harold R. Denton, Director Office of Nuclear Reactor Regulation Attachments!Appendices:

1. Attachments 1-2
2. Appendix A - Technical Specifications (NUREG-1149)
3. Appendix B - Environmental Protection Plan
4. Appendix C - Additional Conditions Date of Issuance: August 8, 1985 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Amendment No. Q, 23, ~~, 188 Revised by letter dated October 28, 2004 Revised by letter dated December 10, 2004 Revised by letter dated May 31,2007 (4)

Physical Security and Safeguards

$59,687,081 Exelon Generation Company shall provide to the Director of the Office of Nuclear Reactor Regulation a copy of any application, at the time it is filed, to transfer (excluding grants of security interests or liens) from Exelon Generation Company to its direct or indirect parent, or to any other affiliated company, facilities for the production, transmission or distribution of electric energy having a depreciated book value exceeding ten percent (10%) of Exelon Generation Company's consolidated net utility plant, as recorded on Exelon Generation Company's book of accounts.

(a)

The decommissioning trust agreement must be in a form acceptable to the NRC.

The decommissioning trust agreement for Limerick, Unit 2, at the time the transfer of the unit to Exelon Generation Company is effected and thereafter, is subject to the following:

Limerick, Unit 2 Exelon Generation Company shall have decommissioning trust funds for Limerick, Unit 2, in the following minimum amount, when Limerick, Unit 2, is transferred to Exelon Generating Company:

(6)

(7)

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, submitted by letter dated May 17, 2006, is entitled:

"Limerick Generating Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 2." The set contains Safeguards Information protected under 10 CFR 73.21.

(b)

With respect to the decommissioning trust fund, investments in the securities or other obligations of Exelon Corporation or affiliates thereof, or their successors or assigns are prohibited.

Except for investments tied to market indexes or other non-nuclear sector mutual funds, investments in any entity owning one or more nuclear power plants are prohibited.

1 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Amendment No. 68, 81,108 Revised by letter dated October 28,2004 Revised by letter dated December 10, 2004 Revised by letter dated May 31,2007

, Attachment 7 Marked FOL Excerpt Page Oyster Creek Nuclear Generating Station Oyster Creek Nuclear Generating Station LICENSE NO. DPR-16 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Page

(6)

Long Range Planning Program - Deleted t

(4)

(5)

(7) Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, submitted by letter dated May 17, 2006, is entitled: "Oyster Creek Nuclear Generating Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 5." The set contains Safeguards Information protected under 10 CFR 73.21.

)1 t'

f d

d nspec Ions 0 core spray spargers, piping an associate components will be performed in accordance with BWRVIP-18, "BWR Core Spray Internals Inspection and Flaw Evaluation Guidelines," as approved by NRC staffs Final Safety Evaluation Report dated December 2, 1999.

Reactor Vessel Integrated Surveillance Program Exelon Generation Company is authorized to revise the Updated Final Safety Analysis Report (UFSAR) to allow implementation of the Boiling Water Reactor Vessel and Internals Project reactor pressure vessel Integrated Surveillance Program as the basis for demonstrating compliance with the requirements of Appendix H to Title 10 of the Code of Federal Regulations Part 50, "Reactor Vessel Material Surveillance Program Requirements," as set forth in the licensee's application dated December 20,2002, and as supplemented on May 30, September 10, and November 3, 2003.

All capsules in the reactor vessel that are removed and tested must meet the test procedures and reporting requirements of the most recent NRC-approved version of the Boiling Water Reactor Vessel and Internals Project Integrated Surveillance Program appropriate for the configuration of the specimens in the capsule. Any changes to the capsule withdrawal schedule, including spare capsules, must be approved by the NRC prior to implementation. All capsules placed in storage must be maintained for future insertion. Any changes to storage requirements must be approved by the NRC, as required by 10 CFR Part 50, Appendix H.

1The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Renewed License No. DPR-16

, Attachment 8 Marked FOL Excerpt Page for Peach Bottom Atomic Power Station Peach Bottom Atomic Power Station Units 2 and 3 LICENSE NOS. DPR-44 DPR-56 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 2 Unit 3 3

3

(5)

Exelon Generation Company, pursuant to the Act and 10 CFR Parts 30 and 70, to possess, but not to separate, such byproduct and special nuclear material as may be produced by operation of the facility.

C.

This renewed license shall be deemed to contain and is subject to the conditions specified in the following Commission regulations in 10 CFR Chapter I: Part 20, Section 30.34 of Part 30, Section 40.41 of Part 40, Section 50.54 of Part 50, and Section 70.32 of Part 70; all applicable provisions of the Act and the rules, regulations, and orders of the Commission now or hereafter in effect; and is subject to the additional conditions specified below:

(1)

Maximum Power Level Exelon Generation Company is authorized to operate the Peach Bottom Atomic Power Station, Unit 2, at steady state reactor core power levels not in excess of 3514 megawatts thermal.

(2)

Technical Specifications The Technical Specifications contained in Appendices A and B, as revised through Amendment No. 273, are hereby incorporated in the license. Exelon Generation Company shall operate the facility in accordance with the Technical Specifications.

(3)

Physical Protection Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans, including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822) and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, submitted by letter dated May 17, 2006, is entitled: "Peach Bottom Atomic Power Station Security Plan, Training and Qualification Plan, Safeguards Contingency Plan, and Independent Spent Fuel Storage Installation Security Program, Revision 3." The set contains Safeguards Information protected under 10 CFR 73.21.

(4)

Fire Protection The Exelon Generation Company shall implement and maintain in effect all provisions of the approved fire protection program as described in the Updated Final Safety Analysis Report for the facility, and as approved in the NRC Safety Evaluation Report (SER) dated May 23, 1979, and Supplements dated August 14, September 15, October 10 and November 24, 1980, and in the NRC SERs dated September 16, 1993, and August 24, 1994, SUbject to the following provision:

The Exelon Generation Company may make changes to the approved Renewed License No. DPR-44 Revised by letter dated October 28,2004 Revised by letter dated May 29, 2007 Amendment No. 273 Page 3 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the

§~curity Plan:.

~xelon Generation Company shaHfufly Implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan

$ubmitted by letter dated November 23 2009 and withheld from public disclosure in accordance with 10 CFR 2.390.

(5)

Exelon Generation Company, pursuant to the Act and 10 CFR Parts 30 and 70, to possess, but not to separate, such byproduct and special nuclear material as may be produced by operation of the facility.

C.

This renewed license shall be deemed to contain and is subject to the conditions specified in the following Commission regulations in 10 CFR Chapter I: Part 20, Section 30.34 of Part 30, Section 40.41 of Part 40, Section 50.54 of Part 50, and Section 70.32 of Part 70; all applicable provisions of the Act and the rules, regulations, and orders of the Commission now or hereafter in effect; and is subject to the additional conditions specified below:

(1)

Maximum Power Level Exelon Generation Company is authorized to operate the Peach Bottom Atomic Power Station, Unit No. 3, at steady state reactor core power levels not in excess of 3514 megawatts thermal.

(2)

Technical Specifications The Technical Specifications contained in Appendices A and B, as revised through Amendment 1'40.277, are hereby incorporated in the license. Exelon Generation Company shall operate the facility in accordance with the Technical Specifications.1 (3)

Physical Protection Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans, inclUding amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822) and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans2, submitted by letter dated May 17, 2006, is entitled: "Peach Bottom Atomic Power Station Security Plan, Training and Qualification Plan, Safeguards Contingency Plan, and Independent Spent Fuel Storage Installation Security Program, Revision 3." The set contains Safeguards Information protected under 10 CFR 73.21.

(4)

Fire Protection The Exelon Generation Company shall implement and maintain in effect all provisions of the approved fire protection program as described in the Updated Final Safety Analysis Report for the facility, and as approved in 1Licensed power level was revised by Amendment No. 250, dated November 22,2002, and will be implemented following the 14th refueling outage currently scheduled for Fall 2003.

2The training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

i~x;,~~;;'~~~:tion. Co~~any shall luny nro. ',

malntam m effect all f'... VISIons of the C Exelon 1'41 ommIssIon-approved uc ear cyber securit I

submitted by letter dated *..** ypan 2009 and Withheld f No~ember 23, d'

rom publ,c 2~~~/gsure in aCcordance with 10 CFR Page 3 Renewed License No, OPR-56 Revised by letter dated October 28, 2004 Revised by letter dated November 5, 2004 Revised by letter dated May 29, 2007 Amendment No. 277

, Attachment 9 Marked FOL Excerpt Page for Quad Cities Nuclear Power Station Quad Cities Nuclear Power Station Units 1 and 2 LICENSE NOS. DPR-29 DPR-30 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages Unit 1 Unit 2

Am. 244 08/11/09 B.

C. Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 244, are hereby incorporated into the renewed operating license. The licensee shall operate the facility in accordance with the Technical Specifications.

The licensee shall maintain the commitments made in response to the March 14, 1983, NUREG-0737 Order, subject to the following provision:

The licensee may make changes to commitments made in response to the March 14, 1983, NUREG-0737 Order without prior approval of the Commission as long as the change would be permitted without NRC approval, pursuant to the requirements of 10 CFR 50.59. Consistent with this regulation, if the change results in an Unreviewed Safety Question, a license amendment shall be submitted to the NRC staff for review and approval prior to implementation of the change.

D.

Equalizer Valve Restriction Three of the four valves in the equalizer piping between the recirculation loops shall be closed at all times during reactor operation with one bypass valve open to allow for thermal expansion of water.

NRC Ltr E.

05/16/07 The licensee shall fUlly implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined sets of plans1, which contain Safeguards Information protected under 10 CFR 73.21, is entitled: "Quad Cities Nuclear Power Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 2," submitted by letter dated May 17, 2006.

The licensee shall implement and maintain in effect all provisions of the approved fire protection program as described in the Updated Final Safety Analysis Report for the facility and as approved in the Safety Evaluation Reports dated July 27, 1979 with supplements dated November 5, 1980, and Exelon Generation Company shall fUlly implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from public disclosure in accordance with 10 CFR 2.390.

1 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Renewed License No. DPR-29 Amendment No. 244

Am. 239 08/11/09 B.

C. Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 239, are hereby incorporated into this renewed operating license. The licensee shall operate the facility in accordance with the Technical Specifications.

The licensee shall maintain the commitments made in response to the March 14, 1983, NUREG-0737 Order, subject to the following provision:

The licensee may make changes to commitments made in response to the March 14, 1983, NUREG-0737 Order without prior approval of the Commission as long as the change would be permitted without NRC approval, pursuant to the requirements of 10 CFR 50.59. Consistent with this regulation, if the change results in an Unreviewed Safety Question, a license amendment shall be submitted to the NRC staff for review and approval prior to implementation of the change.

D.

Equalizer Valve Restriction Three of the four valves in the equalizer piping between the recirculation loops shall be closed at all times during reactor operation with one bypass valve open to allow for thermal expansion of water.

NRC Ltr E.

05/16/07 The licensee shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, which contain Safeguards Information protected under 10 CFR 73.21, is entitled: "Quad Cities Nuclear Power Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 2," submitted by letter dated May 17, 2006.

F.

The licensee shall implement and maintain in effect all provisions of the approved fire protection program as described in the Updated Final Safety Analysis Report for the facility and as approved in the Safety Evaluation Reports dated July 27, 1979 with supplements dated Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from public disclosure in accordance with 10 CFR 2.390.

1 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Renewed License No. DPR-30 Amendment No. 239

, Attachment 10 Marked FOL Excerpt Page for Three Mile Island Station Three Mile Island Nuclear Station Unit 1 LICENSE NO. DPR-50 Request for Approval of the Exelon Cyber Security Plan Marked-Up FOL Pages

Exelon Generation Company shall fully implement and maintain in effect all provisions of the Commission-approved Exelon Nuclear cyber security plan submitted by letter dated November 23, 2009 and withheld from public disclosure in accordance with 10 CFR 2.390. _~~................~~~~""""""''''-'''''''''''''~

(2)

Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 271 are hereby incorporated in the license. The Exelon Generation Company shall operate the facility in accordance with the Technical Specifications.

(3)

Physical Protection Exelon Generation Company shall fUlly implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822), and the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans1, submitted by letter dated May 17, 2006, is entitled: "Three Mile Island Nuclear Station Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan, Revision 3." The set contains Safeguards Information protected under 10 CFR 73.21.

(4)

Fire Protection Exelon Generation Company shall implement and maintain in effect all provisions of the Fire Protection Program as described in the Updated FSAR for TMI-1.

Changes may be made to the Fire Protection Program without prior approval by the Commission only if those changes would not adversely affect the ability to achieve and maintain safe shutdown in the event of a fire. Temporary changes to specific fire protection features which may be necessary to accomplish maintenance or modifications are acceptable provided that interim compensate measures are implemented.

(5)

The licensee shall implement a secondary water chemistry monitoring program to inhibit steam generator tube degradation. This program shall include:

a.

Identification of a sampling schedule for the critical parameters and control points for these parameters; b.

Identification of the procedures used to measure the values of the critical parameters; c.

Identification of process sampling points; d.

Procedure for the recording and management of data; 1 The Training and Qualification Plan and Safeguards Contingency Plan are Appendices to the Security Plan.

Renewed Operating License No. DPR-50