Letter Sequence RAI |
---|
TAC:ME4529, (Approved, Closed) TAC:ME4530, (Approved, Closed) TAC:ME4531, (Approved, Closed) TAC:ME4532, (Approved, Closed) TAC:ME4533, (Approved, Closed) TAC:ME4534, (Approved, Closed) TAC:ME4535, (Approved, Closed) |
Results
Other: ML11158A230, ML11158A253, NRC-2011-0100, McGuire Nuclear Station, Units 1 and 2, and Oconee Nuclear Station, Units 1, 2, and 3 - Individual SUNSI Notice (TAC Nos. ME4529, ME4530, ME4531, ME4532, ME4533, ME4534, and ME4535)
|
MONTHYEARML1023001682010-08-16016 August 2010 Units 1 & 2 - Supplement 2 to License Amendment Request for Duke Energy Cyber Security Plan Project stage: Supplement ML1106803032011-03-0707 March 2011 Duke Energy Carolinas, LLC - Response to Request for Additional Information Regarding License Amendment Request for Cyber Security Plan Project stage: Response to RAI ML1107302432011-03-16016 March 2011 Request for Additional Information Regarding Cyber Security Plans Based on Nuclear Energy Institute 08-09, Revision 6 Project stage: RAI ML11109A0742011-04-15015 April 2011 Response to Request for Additional Information Regarding License Amendment Request for Cyber Security Plan Project stage: Response to RAI ML11158A2532011-06-30030 June 2011 Individual SUNSI Notice Project stage: Other NRC-2011-0100, McGuire Nuclear Station, Units 1 and 2, and Oconee Nuclear Station, Units 1, 2, and 3 - Individual SUNSI Notice (TAC Nos. ME4529, ME4530, ME4531, ME4532, ME4533, ME4534, and ME4535)2011-06-30030 June 2011 McGuire Nuclear Station, Units 1 and 2, and Oconee Nuclear Station, Units 1, 2, and 3 - Individual SUNSI Notice (TAC Nos. ME4529, ME4530, ME4531, ME4532, ME4533, ME4534, and ME4535) Project stage: Other ML11158A2302011-07-0707 July 2011 SUNSI Individual Notice Project stage: Other ML11224A0172011-08-0909 August 2011 Response to Requested Change Regarding Duke Energy License Amendment Request for Cyber Security Plan Project stage: Request ML11216A0642011-08-31031 August 2011 Issuance of Amendments Regarding Cyber Security Plans Based on NEI 08-09, Revision 6 (TAC Nos. ME4529, 4530, 4531, 4532, 4533, 4534, 44535 Project stage: Approval 2011-04-15
[Table View] |
Request for Additional Information Regarding Cyber Security Plans Based on Nuclear Energy Institute 08-09, Revision 6ML110730243 |
Person / Time |
---|
Site: |
Oconee, Mcguire, Catawba, McGuire ![Duke Energy icon.png](/w/images/7/75/Duke_Energy_icon.png) |
---|
Issue date: |
03/16/2011 |
---|
From: |
Stang J Plant Licensing Branch II |
---|
To: |
Glover M Duke Energy Carolinas |
---|
Stang J, NRR/DORL, 415-1345 |
References |
---|
TAC ME4529, TAC ME4530, TAC ME4531, TAC ME4532, TAC ME4533, TAC ME4534, TAC ME4535 |
Download: ML110730243 (5) |
|
|
---|
Category:Letter
MONTHYEARIR 05000413/20230042024-02-0202 February 2024 Integrated Inspection Report 05000413-2023004 and 05000414-2023004 ML23304A1422024-02-0101 February 2024 Issuance of Environmental Scoping Summary Report Associated with the U.S. Nuclear Regulatory Commission Staffs Review of the Oconee Nuclear Station, Units 1, 2, & 3, Subsequent License Renewal Application IR 05000369/20230042024-01-31031 January 2024 Integrated Inspection Report 05000369/2023004 and 05000370/2023004 ML24005A2512024-01-26026 January 2024 Exemption from Select Requirements of 10 CFR Part 73 - Security Notifications, Reports, and Recordkeeping and Suspicious Activity Reporting ML24019A1392024-01-25025 January 2024 TSTF 505 and 50.69 Audit Summary ML24019A2002024-01-24024 January 2024 Notification of Inspection and Request for Information for NRC Problem Identification and Resolution Inspection ML24005A2492024-01-24024 January 2024 Exemption from Select Requirements of 10 CFR Part 73 (Security Notifications, Reports, and Recordkeeping and Suspicious Activity Reporting) IR 05000269/20243012024-01-11011 January 2024 Notification of Licensed Operator Initial Examination 05000269/2024301, 05000270/2024301, and 05000287/2024301 ML23331A7982023-12-14014 December 2023 Review of the Fall 2022 Steam Generator Tube Inspection Report (01R32) IR 05000369/20234022023-12-14014 December 2023 Material Control and Accounting Program Inspection Report 05000369/2023402 and 05000370/2023402 ML23262A9672023-12-13013 December 2023 Alternative to Use RR-22-0174, Risk-Informed Categorization and Treatment for Repair/Replacement Activities in Class 2 and 3 Systems Section XI, Division 1 ML23317A2272023-11-17017 November 2023 William B. McGuire Nuclear Station, Units 1 and 2 - Transmittal of Dam Inspection Report - Non-Proprietary ML23317A3462023-11-14014 November 2023 Duke Fleet - Correction Letter to License Amendment Nos. 312 & 340 Issuance of Amendments Regarding the Adoption of Technical Specifications Task Force Traveler TSTF-554, Revision 1 IR 05000269/20230032023-11-14014 November 2023 Integrated Inspection Report 05000269/2023003, 05000270/2023003, and 05000287/2023003; and IR 07200040/2023001; and Exercise of Enforcement Discretion IR 05000369/20230032023-10-24024 October 2023 Integrated Inspection Report 05000369/2023003 and 05000370/2023003; and Inspection Report 07200038/2023001 IR 05000369/20240102023-10-13013 October 2023 Notification of McGuire Nuclear Station Comprehensive Engineering Team Inspection U.S. Nuclear Regulatory Commission Inspection Report 05000369, 370/2024010 IR 05000369/20230102023-10-13013 October 2023 Age Related Degradation Inspection Report 05000369/2023010 and 05000370/2023010 IR 05000413/20230102023-10-11011 October 2023 NRC Inspection Report 05000413/2023010 and 05000414/2023010 ML23219A1402023-10-10010 October 2023 Audit Report Proposed Alternative to Use ASME Code Case N-752, Risk Informed Categorization and Treatment for Repair/Replacement Activities in Class 2 and 3 Systems XI, Division 1 ML23269A1102023-10-0606 October 2023 Letter to Steven Snider-Revised Schedule for the Environmental Review of the Oconee Nuclear Station, Unit 1, 2, and 3, Subsequent License Renewal Application ML23256A0882023-09-25025 September 2023 Issuance of Alternative to Steam Generator Welds IR 05000369/20233012023-09-20020 September 2023 William B. McGuire Nuclear Station - NRC Examination Report 05000369/2023301 and 05000370/2023301 ML23230A0652023-08-31031 August 2023 William B. McGuire Nuclear Station, Units 1 and 2 - Relief Request Use of Later Edition of ASME Code ML23195A0782023-08-29029 August 2023 Issuance of Amendments Regarding the Adoption of Technical Specifications Task Force Traveler TSTF-554, Revision 1 IR 05000269/20230052023-08-25025 August 2023 Updated Inspection Plan for Oconee Nuclear Station Units 1, 2 and 3 (Report 05000269/2023005, 05000270/2023005, and 05000287/2023005) IR 05000269/20230112023-08-25025 August 2023 Comprehensive Engineering Team Inspection Report 05000269/2023011 and 05000270/2023011 and 05000287/2023011 IR 05000413/20230052023-08-25025 August 2023 Updated Inspection Plan for Catawba Nuclear Station Units 1 and 2 (Report 05000413/2023005 and 05000414/2023005) IR 05000369/20230052023-08-25025 August 2023 Updated Inspection Plan for McGuire Nuclear Station Units 1 and 2 (Report 05000369/2023005 and 05000370/2023005) ML23233A1692023-08-17017 August 2023 EN 56683 - Curtiss Wright, Interim Notification Report for PotentialPurt2l IR 05000369/20230022023-07-28028 July 2023 Integrated Inspection Report 05000369/2023002 and 05000370/2023002 IR 05000269/20230022023-07-28028 July 2023 Integrated Inspection Report 05000269/2023002, 05000270/2023002 and 05000287/2023002 ML23208A0972023-07-27027 July 2023 Subsequent License Renewal List of Threatened and Endangered Species That May Occur in Your Proposed Project Location or May Be Affected IR 05000413/20230022023-07-25025 July 2023 Integrated Inspection Report 05000413/2023002 and 05000414/2023002 IR 05000369/20234202023-07-24024 July 2023 Security Baseline Inspection Report 050003692023420 and 050003702023420 ML23206A0092023-07-24024 July 2023 William B. McGuire Nuclear Station Operator Licensing Written Examination Approval 05000369/2023301 and 05000370/2023301 IR 05000269/20230102023-07-19019 July 2023 Biennial Problem Identification and Resolution Inspection Report 05000269/2023010 and 05000270/2023010 and 05000287/2023010 and Notice of Violation ML23207A0762023-07-14014 July 2023 EN 56557 - Update to Part 21 Report Re Potential Defect with Trane External Auto/Stop Emergency Stop Relay Card Pn: XI2650728-06 ML23178A0682023-07-0303 July 2023 Audit Plan Proposed Alternative to Use ASME Code Case N-752, Risk-Informed Categorization and Treatment for Repair/Replacement Activities in Class 2 & 3 Systems Section XI, Division 1 ML23159A2712023-06-20020 June 2023 William B. McGuire Nuclear Station, Unit 1 - Relief Request Impractical Reactor System Welds ML23237A2672023-06-13013 June 2023 June 13, 2002 - Meeting Announcement - McGuire and Catawba Nuclear Stations 50-369, 50-370 and 50-413, 50-414 ML23159A0052023-06-0505 June 2023 56557-EN 56557 - Paragon - Redlined ML23132A2392023-06-0101 June 2023 Summary of the April 2023 Remote Environmental Audit Related to the Review of the Subsequent License Renewal Application ML23144A0192023-05-25025 May 2023 Review of the Spring 2022 Steam Generator Tube Inspection Report (O3R31) IR 05000269/20230012023-05-12012 May 2023 Integrated Inspection Report 05000269/2023001 and 05000270/2023001 and 05000287/2023001 IR 05000413/20230012023-05-0505 May 2023 Integrated Inspection Report 05000413/2023001 and 05000414/2023001 ML23121A0552023-05-0303 May 2023 Acknowledgement of Withdrawal Request to Revise TS 5.5.2 Containment Leakage Rate Testing Program ML23118A0762023-05-0101 May 2023 Approval for Use of Specific Provision of a Later Edition of the American Society of Mechanical Engineers Boiler and Pressure Vessel Code, Section XI ML23115A2122023-05-0101 May 2023 Review of the Spring 2022 Steam Generator Tube Inspection Report IR 05000369/20230012023-05-0101 May 2023 Integrated Inspection Report 05000369/2023001 and 05000370/2023001 IR 05000413/20230112023-04-25025 April 2023 Focused Engineering Inspection Report 05000413/2023011 and 05000414/2023011 2024-02-02
[Table view] Category:Request for Additional Information (RAI)
MONTHYEARML23284A3322023-10-11011 October 2023 Request for Additional Information Alternative Request (RA-22-0174) (L-2022-LLR-0060) ML23271A1792023-09-28028 September 2023 Request for Confirmation License Amendment Application to Revise Control Room Cooling TS 3.7.11 ML23178A0682023-07-0303 July 2023 Audit Plan Proposed Alternative to Use ASME Code Case N-752, Risk-Informed Categorization and Treatment for Repair/Replacement Activities in Class 2 & 3 Systems Section XI, Division 1 ML23156A2452023-06-0505 June 2023 Audit Summary and RAI-RCI - Revised Enclosure ML23151A3482023-05-30030 May 2023 Duke Fleet - Request for Additional Information Proposed Alternative for Pressurizer Welds in Accordance with 10 CFR 50.55a(z)(1) ML23142A2732023-05-22022 May 2023 Duke Fleet - Request for Additional Information Proposed Alternative for Steam Generator Welds in Accordance with 10 CFR 50.55a(z)(1) ML23095A0052023-04-0404 April 2023 002 Radiation Safety Baseline Inspection Information Request ML23086C0362023-03-27027 March 2023 Request for Additional Information Steam Generator Tube Inspection Report (03R31) ML23039A1632023-02-0808 February 2023 Requalification Program Inspection ML23038A1832023-02-0707 February 2023 Request for Additional Information Alternative Request (RA-22-0174) to Use ASME Code Case N-752 ML23037A0772023-02-0606 February 2023 402 Cyber Notification and RFI Letter Final ML23030B9032023-01-30030 January 2023 Formal Release of RAIs for McGuire Unit 1, Relief Request Impractical RPV Rx Coolant System Welds, Due March 1, 2023 (Email) ML23017A2232023-01-13013 January 2023 Request for Additional Information (RAI) Issuance for McGuire Unit 1 Steam Generator Tube Inspection Report (Email) ML22336A0692022-11-28028 November 2022 Final 2023 Catawba Nuclear Station (CNS) Commercial Grade Dedication (CGD) Inspection Information Request ML22251A2902022-09-0808 September 2022 Request for Additional Information Additional Mode Change Limitations Applicable to the Adoption of Technical Specifications Tasks Force Traveler (TSTF) No. 359, Revision 9 ML22234A0052022-08-30030 August 2022 SLRA - Feedback for RAI B2.1.7-4a to Duke - August 16, 2022 ML22175A0162022-06-24024 June 2022 Notification of Inspection and Request for Information for NRC Problem Identification and Resolution Inspection ML22157A0042022-06-0606 June 2022 10 CFR 50.59 Inspection Initial Information Request ML22154A1312022-06-0303 June 2022 NRR E-mail Capture - Catawba Nuclear Station, Units 1 and 2 - Request for Additional Information Environmentally-Assisted Fatigue License Renewal Commitment ML22154A2122022-06-0101 June 2022 SLRA - 2nd Round RAI B2.1.7-4b ML22157A0012022-06-0101 June 2022 Email from NRC (Angela Wu) to Duke (Paul Guill) - Oconee SLRA - Additional NRC Comments on RAI 4.6.1-1a ML22124A1612022-05-0303 May 2022 Email from Angela Wu (NRC) to Steve Snider (Duke) - Oconee SLRA - 2nd Round RAI B2.1.7-4a ML22124A1632022-05-0303 May 2022 (Public) Oconee SLRA - 2nd Round RAI B2.1.7-4a ML22122A0182022-04-28028 April 2022 Attachment: Oconee SLRA - 2nd Round RAI B2.1.9-2a ML22122A0192022-04-28028 April 2022 Email from Angela Wu (NRC) to Steve Snider (Duke) - Oconee SLRA - 2nd Round RAI B2.1.9-2a ML22122A1312022-04-27027 April 2022 (Public) Oconee SLRA - 2nd Round RAIs - Trp 76 (Irradiation Structural) - FE 3.5.2.2.2.6 Redacted ML22115A1412022-04-25025 April 2022 NRR E-mail Capture - Duke Common EOF Relocation - Request for Addition Information ML22113A0092022-04-20020 April 2022 Attachment: Oconee SLRA - Final RAI 3.1.2-1 ML22112A0072022-04-20020 April 2022 Email from Marieliz Johnson (NRC) to Steve Snider (Duke) - Oconee SLRA - Request for Confirmation of Information 3.5.2.2.2.6-L ML22102A2962022-04-13013 April 2022 Request for Withholding Information from Public Disclosure Response to Request for Additional Information ML22081A0052022-03-21021 March 2022 Email from Angela Wu (NRC) to Steve Snider (Duke) - Oconee SLRA - 2nd Round RAI B4.1-3 ML22081A0062022-03-21021 March 2022 Attachment: Oconee SLRA - 2nd Round RAI B4.1-3 ML22080A0772022-03-16016 March 2022 SLRA - RAI Set 4 (2nd Round Rais) ML22063B1782022-03-0909 March 2022 Request for Additional Information Regarding LAR for Revision to the Conditional Exemption of the End of Cycle Moderator Temperature Coefficient Measurement Methodology (EPID L-2021-LLA-0198) NON-PROPRIETARY ML22069A0012022-03-0808 March 2022 Attachment: Oconee SLRA - Final Requests for Confirmation of Information - Set 4 ML22063A4502022-03-0404 March 2022 Request for Additional Information Application to Revise TS 3.7.7, Low Pressure Service Water (LPSW) System, to Extend the Completion Time for One Required Inoperable LPSW Pump RA-22-0036, Responses to NRC Request for Additional Information Set 22022-02-14014 February 2022 Responses to NRC Request for Additional Information Set 2 ML22024A1122022-01-24024 January 2022 2022 CNS POV Inspection Information Request ML22019A2442022-01-18018 January 2022 Notification of an NRC Fire Protection Team Inspection (FPTI) (NRC Inspection Report 05000269/2022010, 05000270/2022010, 05000287/2022010) and Request for Information (RFI) ML22019A1032022-01-18018 January 2022 Email from Angela Wu (NRC) to Steve Snider (Duke) - Oconee SLRA - Requests for Additional Information - Set 3 ML22019A1042022-01-18018 January 2022 Attachment: Oconee SLRA - Final Requests for Additional Information - Set 3 ML22012A0422022-01-11011 January 2022 SLRA - Final Requests for Additional Information - Set 2 ML22010A0732022-01-0606 January 2022 50.59 Inspection Information Request ML22010A1132022-01-0505 January 2022 SLRA - RCIs - Set 3 ML21354A8612021-12-15015 December 2021 NRR E-mail Capture - Request for Additional Information - Duke Fleet Request RA-19-0352 - Alternative for RPV Closure Stud Exams (L-2020-LLR-0156) ML21335A2252021-12-0101 December 2021 NRR E-mail Capture - Catawba Nuclear Station, Unit 2 - Request for Additional Information Spring 2021 Steam Generator Tube Inspection Report (L-2021-LRO-0043) ML21333A0392021-11-29029 November 2021 RP Inspection Document Request ML21327A2782021-11-23023 November 2021 Email from Angela Wu (NRC) to Steve Snider (Duke) - Oconee SLRA - Final RAIs (Set 1 and 2nd Round RAI B2.1.27-1a) ML21327A2792021-11-23023 November 2021 SLRA - Final Requests for Additional Information - Set 1 ML21327A2802021-11-23023 November 2021 SLRA - Final 2nd Round RAI - RAI B2.1.27-1a 2023-09-28
[Table view] |
Text
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON. D.C. 20555-0001 March 16, 2011 Mr. Michael R. Glover General Manager. Nuclear Support Nuclear Generation Duke Energy Carolinas, LLC P.O. Box 1006 Charlotte NC 28201-1106
SUBJECT:
CATAWBA NUCLEAR STATION, UNITS 1 AND 2, MCGUIRE NUCLEAR STATION, UNITS 1 AND 2, AND OCONEE NUCLEAR STATION, UNITS 1,2.
AND 3 - REQUEST FOR ADDITIONAL INFORMATION REGARDING CYBER SECURITY PLANS BASED ON NUCLEAR ENERGY INSTITUTE 08-09, REVISION 6 (TAC NOS. ME4529, ME4530, ME4531, ME4532, ME4533, ME4534, AND ME4535)
Dear Mr. Glover:
By letter dated August 16, 2010 (Agencywide Documents Access and Management System, Accession No. ML102300168), you submitted Supplement 2 of your cyber security plans for approval for the Catawba Nuclear Station, Units 1 and 2, the McGuire Nuclear Station, Units 1 and 2, and the Oconee Nuclear Station, Units 1, 2, and 3. Your cyber security plans were based on Nuclear Energy Institute 08-09, Revision 6.
The Nuclear Regulatory Commission staff is reviewing the submittal and has determined that additional information is required to complete its evaluation. This request was discussed with Mr. Jeff Thomas of your staff on March 14, 2011, and it was agreed that a response would be provided within 30 days from the date of this letter.
If you have any questions, please contact me at 301-415-1345.
Sincerely,
~
~ ,
~
~,
n F. Stang, Project M nager Plant Licensing Branch 11-1 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-413,50-414,50-369,50-370, 50-269, 50-270, and 50-287
Enclosure:
Request for Additional Information cc w/encl: Distribution via Listserv
REQUEST FOR ADDITIONAL INFORMATION (RAn REGARDING CYBER SECURITY PLAN CATAWBA NUCLEAR STATION, UNITS 1 AND 2 DOCKET NOS. 50-413, AND 50-414 MCGUIRE NUCLEAR STATION, UNITS 1 AND 2 DOCKET NOS. 50-369 AND 50-370 OCONEE NUCLEAR STATION, UNITS 1,2, AND 3 DOCKET NOS. 50-269. 50-270, AND 50-287 RAI 1: Records Retention Paragraph (c)(2) of Title 10 of the Code of Federal Regulations (10 CFR), Part 73, Section 73.54 requires licensees to design a cyber security program to ensure the capability to detect, respond to, and recover from cyber attacks. Furthermore, 10 CFR 73.54(e)(2)(i) requires licensees to maintain a cyber security plan that describes how the licensee will maintain the capability for timely detection and response to cyber attacks. The ability for a licensee to detect and respond to cyber attacks requires accurate and complete records and is further supported by 10 CFR 73.54(h), which states: "the licensee shall retain all records and supporting technical documentation required to satisfy the requirements of this section as a record until the [Nuclear Regulatory] Commission terminates the license for which the records were developed, and shall maintain superseded portions of these records for at least three (3) years after the record is superseded, unless otherwise specified by the Commission."
The licensee's Cyber Security Plan (CSP) in Section 4.13 states that Critical Digital Asset (CDA) audit records and audit data (e.g., operating system logs, network device logs) are retained for a period of time that is less than what is required by 10 CFR 73.54(h).
Explain the deviation from the 10 CFR 73.54(h) requirement to retain records and supporting technical documentation until the Commission terminates the license (or to maintain superseded portions of these records for at least 3 years) and how that meets the requirements of 10 CFR 73.54.
RA12: Implementation Schedule The regulation at 10 CFR 73.54, "Protection of digital computer and communication systems and networks," requires licensees to submit a CSP that satisfies the requirements of this section for Commission review and approval. Furthermore, each submittal must include a proposed implementation schedule and the implementation of the licensee's cyber security program must be consistent with the approved schedule. Paragraph (a) of 10 CFR 73.54 requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat.
Enclosure
-2 The completion of several key intermediate milestones (Items (a) through (g) below) would demonstrate progress toward meeting the requirements of 10 CFR 73.54. The Nuclear Regulatory Commission (NRC) staff's expectation is that the key intermediate milestones will be completed in a timely manner, but no later than December 31, 2012, except for Watts Bar Nuclear Plant, Unit 2. In order to support the NRC inspection of the implementation prior to issuance of an operating license for Watts Bar Nuclear Plant, Unit 2, the key intermediate milestones shall be completed no later than December 31, 2011. The key CSP implementation milestones are as follows:
a) Establish, train, and qualify Cyber Security Assessment Team, as described in Section 3.1.2, "Cyber Security Assessment Team," of the CSP.
b) Identify Critical Systems and CDAs, as described in Section 3.1.3, "Identification of Critical Digital Assets," of the CSP.
c) Implement cyber security defense-in-depth architecture by installation of
[deterministic one-way] devices, as described in Section 4.3, "Defense-In-Depth Protective Strategies" of the CSP.
d) Implement the management, operational and technical cyber security controls that address attacks promulgated by use of portable media, portable devices, and portable equipment as described in Appendix D, Section 1.19 "Access Control for Portable and Mobile Devices," of Nuclear Energy Institute (NEI) 08-09, Revision 6.
e) Implement observation and identification of obvious cyber-related tampering to existing insider mitigation rounds as described in Appendix E, Section 4.3, "Personnel Performing Maintenance and Testing Activities," and Appendix E, Section 10.3, "Baseline Configuration" of NEI 08-09, Revision 6.
f) Identify, document, and implement cyber security controls to physical security target set CDAs in accordance with Section 3.1.6, "Mitigation of Vulnerabilities and Application of Cyber Security Controls," of the CSP.
g) Ongoing monitoring and assessment activities will commence for those target set CDAs whose security controls have been implemented, as described in Section 4.4, "Ongoing Monitoring and Assessment," of the CSP h) Full implementation of the CSP for all safety, security, and emergency preparedness functions.
Provide a revised CSP implementation schedule that identifies the appropriate milestones, completion dates, supporting rationale, and level of detail to allow the NRC to evaluate the licensee's proposed schedule and associated milestone dates which include the final completion date. It is the NRC's intention to develop a license condition incorporating your revised CSP implementation schedule containing the key milestone dates.
- 3 RAJ 3: Scope of Systems Paragraph (a) of 10 CFR 73.54 requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat as described in 10 CFR 73.1. In addition, 10 CFR 73.54(a)(1) states that the licensee shall protect digital computer and communication systems and networks associated with:
(i) Safety-related and important-to-safety functions; (ii) Security functions; (iii) Emergency preparedness functions, including offsite communications; and (iv) Support systems and equipment which, if compromised, would adversely impact safety, security, or emergency preparedness functions.
Subsequent to the issuance of the cyber security rule, the NRC stated that 10 CFR 73.54 should be interpreted to include structures, systems, and components (SSCs) in the balance of plant (BOP) that have a nexus to radiological health and safety (Agencywide Documents Access and Management System (ADAMS), Accession No. ML103490344, dated November 19, 2010). The SSCs in the BOP are those that could directly or indirectly affect reactivity of a nuclear power plant and could result in an unplanned reactor shutdown or transient and are therefore, within the scope of important-to-safety functions described in 10 CFR 73.54(a)(1). Furthermore, the NRC issued a letter to NEI dated January 5, 2011 (ADAMS Accession No. ML103550480), that provided licensees with additional guidance on one acceptable approach to comply with the Commission's policy determination.
Explain how the scoping of systems provided by the licensee's CSP meets the requirements of 10 CFR 73.54 and the additional guidance provided by the NRC.
ML110730243 OFFICE INRR/LPL2-1/PM NRR/LPL2-1/PM NRR/LPL2-1/LA NRR/LPL2-1/BC NRR/LPL2-1/PM 119 JThompson MO'Brien GKulesa JStang DATE 13/11111 3/16/11 3/16/11 3/16/11 3/16/11