ML103540075

Request for Additional Information

ML103540075
Person / Time
Site:	Summer
Issue date:	01/04/2011
From:	Martin R Plant Licensing Branch II
To:	Gatlin T South Carolina Electric & Gas Co
Martin R, NRR/DLPM, 415-1493
References
TAC ME4553
Download: ML103540075 (3)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 January 4, 2011 Mr. Thomas D. Gatlin Vice President, Nuclear Operations South Carolina Electric & Gas Company Virgil C. Summer Nuclear Station Post Office Box 88 Jenkinsville, SC 29065

SUBJECT:

VIRGIL C. SUMMER NUCLEAR STATION, UNIT NO.1 (VCSNS) - REQUEST FOR ADDITIONAL INFORMATION (TAC NO. ME4553)

Dear Mr. Gatlin:

By letter dated August 5, 2010 (Agencywide Documents Access and Management System, Accession No. ML102210192), South Carolina Electric & Gas Company, submitted a license amendment request (LAR) for VCSNS. The LAR requested approval of the VCSNS Cyber Security Plan (CSP), provided a proposed CSP implementation schedule, and included a proposed revision to the Facility Operating License to incorporate the provisions for implementing and maintaining in effect the provisions of the approved CSP.

We find that additional information is needed in order to complete our review of the subject LAR for VCSNS as stated in the enclosure. Please provide a response by January 30, 2011.

Sincerely,

/~-fJ1~-

.ii, 1/ Roo rt . Martin, Senior Project Manager Plant Licensing Branch 11-1 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket No. 50-395

Enclosure:

Request for Additional Information cc w/encl: Distribution via Listserv

REQUEST FOR ADDITIONAL INFORMATION REGARDING THE LICENSE AMENDMENT REQUEST TO IMPLEMENT A CYBER SECURITY PLAN AT VIRGIL C. SUMMER NUCLEAR STATION, UNIT NO.1 (VCSNS)

TAC NO. ME4553 Cyber Security Plan (CSP) Section 4: Establishing, Implementing, and Maintaining the Cyber Security Program: Defense-in-Depth Protective Strategies - Definition of Acronyms Title 10 of the Code of Federal Regulations (10 CFR), Part 73, Section 73.54(b)(1) requires the licensee to analyze digital computer and communication systems and networks and identify those assets that must be protected against cyber attacks. Nuclear Energy Institute Report' 08-09, Revision 6, Section 3.1.3, "Identification of Critical Digital Assets (CDAs)," states that the Cyber Security Assessment Team will identify and document critical systems (CS),

which must be protected under 10 CFR 73.54. Within the VCSNS cyber security plan (CSP),

Section 4.3, "Defense-In-Depth - Protective Strategies," bullet six states "PPC and Data Acquisition are in Levels 3 and 2." The paragraph below the bulleted items states "EP systems are allocated to the highest level possible while allowing the system to achieve its design or regulatory function."

Please define the abbreviation "PPC", identify what type of device the PPC is, and describe the PPC's purpose and its function. As stated in the VCSNS CSP: "PPC and Data Acquisition are in Levels 3 and 2."

Furthermore, clarify whether the PPC and the Data Acquisition system(s) are grouped together to form a CDA and/or a CS, or are the two devices analyzed and protected individually? Identify the level that PPC will be located within and what level the Data Acquisition system will be located within.

Additionally, please define the abbreviation "EP" and identify what type of system it is, how it is used, and in which level it will be located.

, Agencywide Documents Access and Management System Accession No. ML101180437 Enclosure

January 4, 2011 Mr. Thomas D. Gatlin Vice President, Nuclear Operations South Carolina Electric & Gas Company Virgil C. Summer Nuclear Station Post Office Box 88 Jenkinsville, SC 29065

SUBJECT:

VIRGIL C. SUMMER NUCLEAR STATION, UNIT NO.1 (VCSNS)-REQUEST FOR ADDITIONAL INFORMATION (TAC NO. ME4553)

Dear Mr. Gatlin:

By letter dated AUgust 5, 2010 (Agencywide Documents Access and Management System, Accession No. ML102210192), South Carolina Electric & Gas Company, submitted a license amendment request (LAR) for VCSNS. The LAR requested approval of the VCSNS Cyber Security Plan (CSP), provided a proposed CSP implementation schedule, and included a proposed revision to the Facility Operating License to incorporate the provisions for implementing and maintaining in effect the provisions of the approved CSP.

We find that additional information is needed in order to complete our review of the subject LAR for VCSNS as stated in the enclosure. Please provide a response by January 30, 2011.

Sincerely, IRA!

Robert E. Martin, Senior Project Manager Plant Licensing Branch 11-1 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket No. 50-395

Enclosure:

Request for Additional Information cc w/encl: Distribution via Listserv DISTRIBUTION PUBLIC LPL2-1 RtF RidsAcrsAcnw_MailCTR Resource RidsNrrDorlDpr Resource RidsNrrDorlLpl2-1 Resource RidsRgn2MailCenter Resource RidsNrrLASRohrer Resource RidsNrrPMSummer Resource RidsOgcRp Resource PPederson, NSIR CErlanger, NSIR ADAMS A ccesslon Num ber: ML103540075 *b>y memo dae t d OFFICE LPL2-1/PM LPL2-1/LA NSIRIDSP/BC LPL2-1/BC LPL2-1/PM NAME RMartin SRohrer CErlanger

• GKulesa RMartin DATE 1/3/11 1/3/11 12116/10 114/11 1/4/11 OFFICIAL RECORD COpy