ML110060282

Request for Additional Information, Regarding License Amendment Request for Approval of the Cyber Security Plan

ML110060282
Person / Time
Site:	Wolf Creek
Issue date:	01/10/2011
From:	Balwant Singal Plant Licensing Branch IV
To:	Matthew Sunseri Wolf Creek
Singal, Balwant, 415-3016, NRR/DORL/LPL4
References
TAC ME4265
Download: ML110060282 (4)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 January 10, 2011 Mr. Matthew W. Sunseri President and Chief Executive Officer Wolf Creek Nuclear Operating Corporation Post Office Box 411 Burlington, KS 66839

SUBJECT:

WOLF CREEK GENERATING STATION - REQUEST FOR ADDITIONAL INFORMATION REGARDING LICENSE AMENDMENT REQUEST FOR APPROVAL OF THE CYBER SECURITY PLAN (TAC NO. ME4265)

Dear Mr. Sunseri:

By letter dated July 10, 2010 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML102080329), Wolf Creek Nuclear Operating Corporation submitted a license amendment request for approval of the Cyber Security Plan for Wolf Creek Generating Station.

The U.S. Nuclear Regulatory Commission (NRC) staff has reviewed the information provided in your application and determined that additional information is required in order to complete its review. A draft copy of the enclosed request for additional information was provided to Ms. Diane Hooper of your staff via e-mail on December 16, 2010. On January 4, 2011, Mr. Steve Wideman of your staff informed us that a conference call to discuss the request for additional information is not needed and agreed that a final response to the NRC's questions will be provided within 30 days from the date of this letter.

The NRC staff considers that timely responses to requests for additional information help ensure sufficient time is available for NRC staff review and contribute toward the NRC goal of efficient and effective use of NRC resources.

M. Sunseri -2 If you have any questions, please contact me at 301-415-3016 or balwant.singal@nrc.gov.

Sincerely, b ~\ v--'t t&,~*~

Balwant K. Singal, Senior Project Manager Plant Licensing Branch IV Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket No. 50-482 Enclosure As stated cc w/encl: Distribution via Listserv

REQUEST FOR ADDITIONAL INFORMATION LICENSE AMENDMENT REQUEST FOR APPROVAL OF CYBER SECURITY PLAN WOLF CREEK NUCLEAR OPERATING CORPORATION WOLF CREEK GENERATING STATION DOCKET NO. 50-482 By letter dated July 10, 2010 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML1020803290), Wolf Creek Nuclear Operating Corporation (WCNOC, the licensee) submitted a license amendment request for approval of the Cyber Security Plan (CSP) for Wolf Creek Generating Station (WCGS). The U.S. Nuclear Regulatory Commission staff has reviewed the information provided in your application and determined that the following additional information is required in order to complete its review. A draft copy of the enclosed request for additional information was provided to Ms. Diane Hooper of your staff via e-mail on December 16, 2010.

Request for Additional Information (RA!)

Title 10 of the Code of Federal Regulations Section 73.54(c)(2) requires the licensee to apply and maintain defense-in-depth protective strategies to ensure the capability to detect, respond to, and recover from cyber attacks. Section 4.3, "Defense-in-Depth Protective Strategies," of the WCGS CSP states that, when referring to protections which isolate or secure safety-related CDAs [Critical Digital Assets] within Level 4 and Security CDAs within cyber security defensive Levels 4 and 3, that these devices may be secured via one or more deterministic devices (i.e.,

data diodes, air gaps) that isolate CDAs in Level 4, or one or more non-deterministic network isolation devices are used to isolate CDAs in Level 4.

Please clarify if any of the non-deterministic devices for the safety-related CDAs and security CDAs are in parallel (i.e., connecting the same network segments) with the deterministic devices because of the potential they may negate the protection afforded by the deterministic devices.

Enclosure

ML110060282

• Memo dated 12/14/2010 OFFICE NRR/LPL4/PM NRR/LPL4/LA NSIR/DSPIISCPB/BC NRR/LPL4/BC NRR/LPL4/PM NAME BSingal JBurkhardt CErlanger* MMarkley BSingal DATE 1/10/11 1/7111 12114/10 1/10/11 1/10/11