ML11147A119

Request for Additional Information Regarding License Amendment Request for Approval of Cyber Security Plan (TAC Nos. ME4549, ME4550, ME4582, and ME4583)

ML11147A119
Person / Time
Site:	Saint Lucie, Turkey Point
Issue date:	06/15/2011
From:	Orf T Plant Licensing Branch II
To:	Nazar M Florida Power & Light Co
Orf T
References
TAC ME4549, TAC ME4550, TAC ME4582, TAC ME4583
Download: ML11147A119 (3)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 June 15, 2011 Mr. Mano Nazar Executive Vice President, Nuclear and Chief Nuclear Officer Florida Power and Light Company P.O. Box 14000 Juno Beach, Florida 33408-0420

SUBJECT:

ST. LUCIE PLANT, UNITS 1 AND 2; TURKEY POINT PLANT, UNITS 3 AND 4 REQUEST FOR ADDITIONAL INFORMATION REGARDING LICENSE AMENDMENT REQUEST FOR APPROVAL OF CYBER SECURITY PLAN (TAC NOS. ME4549, ME4550, ME4582, AND ME4583)

Dear Mr. Nazar:

By letter dated August 2,2010, as supplemented by letters dated September 27,2010, and November 17,2010, Florida Power & Light Company (FPL) submitted a license amendment request for St. Lucie Unit Nos. 1 and 2. By letter dated July 28, 2010, FPL submitted a license amendment request for Turkey Point Unit Nos. 3 and 4. The proposed amendments requested approval of the St. Lucie Cyber Security Plan and the Turkey Point Cyber Security Plan, respectively.

The NRC staff is reviewing your submittals and has determined that additional information is needed to complete its review. The specific question is found in the enclosed request for additional information (RAI). It is requested that your RAI response be provided within 30 days of the date of this letter.

Sincerely, Tracy J. Ort, Project Manager Plant Licensing Branch 11-2 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-335, 50-389 50-250 and 50-251

Enclosure:

Request for Additional Information cc w/enclosure: Distribution via Listserv

REQUEST FOR ADDITIONAL INFORMATION REGARDING LICENSE AMENDMENT REQUEST FOR APPROVAL OF THE CYBER SECURITY PLAN ST. LUCIE, UNIT NOS. 1 AND 2 DOCKET NOS. 50-335 AND 50-389 TURKEY POINT, UNIT NOS. 3 AND 4 DOCKET NOS. 50-250 AND 50-251 The requirements of 10 CFR 73.54(a) are that each licensee subject to the requirements of this section shall provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat as described in Section 73.1. Furthermore, 10 CFR 73.54(a)( 1) states that the licensee shall protect digital computer and communication systems and networks associated with:

(i) safety-related and important-to-safety functions; (ii) security functions; (iii) emergency preparedness functions, including offsite communications; and (iv) support systems and equipment that, if compromised, would adversely impact safety, security, or emergency preparedness functions.

Section 3.0 of Enclosure 1 to the cyber security plan 1 , Evaluation of Proposed Change, includes clarifications to the Nuclear Energy Institute 08-09 Cyber Security Plan template with regard to Emergency Preparedness and states, "Therefore, the systems and portions of systems to be protected from cyber attack in accordance with 10 CFR 73.54(a)(1)(iii), must: (1) Perform a RSPS [Risk Significant Planning Standards]-related EP [emergency preparedness] function, and (2) Be within the licensee's complete custody and controL" The rule clearly states that digital computer and communication systems and networks associated with emergency preparedness functions, including offsite communications, shall be adequately protected against cyber attacks. For systems and networks that are not within the licensee's complete custody and control, the licensee is still required to ensure protection against cyber attacks.

Explain Florida Power & Light Company's deviation from the 10 CFR 73.54(a)(1).

1 The cyber security plan submitted by the licensee to the U.S. Nuclear Regulatory Commission (NRC) for S1. Lucie, Units 1 and 2, can be found at Agencywide Documents Access and Management System (ADAMS) Accession No. ML102180183. The cyber security plan submitted by the licensee to the NRC for Turkey Point, Units 3 and 4, can be found at ADAMS Accession No. ML102250059.

ENCLOSURE

June 15, 2011 Mr. Mano Nazar Executive Vice President, Nuclear and Chief Nuclear Officer Florida Power and Light Company P.O. Box 14000 Juno Beach, Florida 33408-0420

SUBJECT:

ST. LUCIE PLANT, UNITS 1 AND 2; TURKEY POINT PLANT, UNITS 3 AND 4 REQUEST FOR ADDITIONAL INFORMATION REGARDING LICENSE AMENDMENT REQUEST FOR APPROVAL OF CYBER SECURITY PLAN (TAC NOS. ME4549, ME4550, ME4582, AND ME4583)

Dear Mr. Nazar:

By letter dated August 2,2010, as supplemented by letters dated September 27,2010, and November 17,2010, Florida Power & Light Company (FPL) submitted a license amendment request for St. Lucie Unit Nos. 1 and 2. By letter dated July 28,2010, FPL submitted a license amendment request for Turkey Point Unit Nos. 3 and 4. The proposed amendments requested approval of the St. Lucie Cyber Security Plan and the Turkey Point Cyber Security Plan, respectively.

The NRC staff is reviewing your submittals and has determined that additional information is needed to complete its review. The specific question is found in the enclosed request for additional information (RAI). It is requested that your RAI response be provided within 30 days of the date of this letter.

Sincerely, IRA!

Tracy J. Ort, Project Manager Plant Licensing Branch 11-2 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-335, 50-389 50-250 and 50-251

Enclosure:

Request for Additional Information cc w/enclosure: Distribution via Listserv DISTRIBUTION:

PUBLIC RidsNrrLABClayton CErlanger, NSIR LPL2*2 r/f RidsAcrsAcnw MailCTR PPederson, NSIR RidsNrrDorlLpl2*2 RidsNrrDoriDpr lWengert, NRRlDORL RidsNrrPMStLucie RidsOgcRp 6Slnga!, NRRlDORL RidsNrrPMTurkeyPoint RidsRgn2MailCenter ADAMS Accession No' ML11147A119 'via email NSIRIDSP/DDRSI

. OFFICE LPLlI-21PM LPLlI-21LA LPLlI-2/PM LPLlI-2/BC LPLIl-2/PM ISCPB/BC NAME TOrt BClayton JPaige CErlanger* DBroaddus TOrt DATE 05/31/11 05/31/11 06/08/11 06/08/11 06/15/11 06/15/11 OFFICIAL AGENCY RECORD