ML11147A121

Request for Additional Information Regarding License Amendment Request for Approval of Cyber Security Plan

ML11147A121
Person / Time
Site:	Seabrook
Issue date:	06/08/2011
From:	Geoffrey Miller Plant Licensing Branch 1
To:	Freeman P, O'Keefe M NextEra Energy Seabrook
Orf T
References
TAC ME4453
Download: ML11147A121 (3)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 June 8, 2011 Mr. Paul Freeman Site Vice President c/o Mr. Michael O'Keefe NextEra Energy Seabrook, LLC P.O. Box 300 Seabrook, NH 03874

SUBJECT:

SEABROOK, UNIT 1 - REQUEST FOR ADDITIONAL INFORMATION REGARDING LICENSE AMENDMENT REQUEST FOR APPROVAL OF CYBER SECURITY PLAN (TAC NO. ME4453)

Dear Mr. Freeman:

By letter dated July 26,2010, as supplemented by letters dated November 16,2010, and March 31, 2011, Next Era Energy Seabrook, LLC, submitted a license amendment request for Seabrook, Unit 1. The proposed amendments requested approval of the Seabrook Cyber Security Plan.

The NRC staff is reviewing your submittals and has determined that additional information is needed to complete its review. The specific question is found in the enclosed request for additional information (RAI). It is requested that your RAI response be provided within 30 days of the date of this letter.

G. Edward Miller, Project Manager Plant Licensing Branch 1-2 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket No. 50-443

Enclosure:

Request for Additional Information cc w/enclosure: Distribution via Listserv

REQUEST FOR ADDITIONAL INFORMATION REGARDING LICENSE AMENDMENT REQUEST FOR APPROVAL OF THE CYBER SECURITY PLAN SEABROOK, UNIT NO.1 DOCKET NO. SO-443 The requirements of 10 CFR 73.S4(a) are that each licensee subject to the requirements of this section shall provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat as described in Section 73.1. Furthermore, 10 CFR 73.S4(a)(1) states that the licensee shall protect digital computer and communication systems and networks associated with:

(i) safety-related and important-to-safety functions; (li) security functions; (iii) emergency preparedness functions, including offsite communications; and (iv) support systems and equipment that, if compromised, would adversely impact safety, security, or emergency preparedness functions.

Section 3.0 of Enclosure 1 to the cyber security plan, Evaluation of Proposed Change, includes clarifications to the Nuclear Energy Institute 08-09 Cyber Security Plan template with regard to Emergency Preparedness and states, "Therefore, the systems and portions of systems to be protected from cyber attack in accordance with 10 CFR 73.S4(a)(1)(iii), must: (1) Perform a RSPS [Risk Significant Planning Standards]-related EP [emergency preparedness] function, and (2) Be within the licensee's complete custody and control."

The rule clearly states that digital computer and communication systems and networks associated with emergency preparedness functions, including offsite communications, shall be adequately protected against cyber attacks. For systems and networks that are not within the licensee's complete custody and control, the licensee is still required to ensure protection against cyber attacks.

Explain NextEra Energy Seabrook's deviation from the 10 CFR 73.S4(a)(1).

ENCLOSURE

June 8, 2011 Mr. Paul Freeman Site Vice President clo Mr. Michael O'Keefe NextEra Energy Seabrook, LLC P.O. Box 300 Seabrook, NH 03874

SUBJECT:

SEABROOK, UNIT 1 - REQUEST FOR ADDITIONAL INFORMATION REGARDING LICENSE AMENDMENT REQUEST FOR APPROVAL OF CYBER SECURITY PLAN (TAC NO. ME4453)

Dear Mr. Freeman:

By letter dated July 26,2010, as supplemented by letters dated November 16,2010, and March 31,2011, NextEra Energy Seabrook, LLC, submitted a license amendment request for Seabrook, Unit 1. The proposed amendments requested approval of the Seabrook Cyber Security Plan.

The NRC staff is reviewing your submittals and has determined that additional information is needed to complete its review. The specific question is found in the enclosed request for additional information (RAI). It is requested that your RAI response be provided within 30 days of the date of this letter.

Sincerely, IRA by JHughey fori G. Edward Miller, Project Manager Plant Licensing Branch 1-2 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket No. 50-443

Enclosure:

Request for Additional Information cc w/enclosure: Distribution via Listserv DISTRIBUTION:

PUBLIC RidsNrrLAABaxter PPederson, NSIR LPL1-2 r/f RidsAcrsAcnw MailCTR TWengert, NRRlDORL RidsNrrDorlLpl1-2 RidsNrrDorlDpr BSingal, NRRlDORL RidsNrrPMSeabrook RidsOgcRp RidsNrrPMStLucie RidsRgn1 MailCenter RidsNrrLABClayton CErlanger, NSIR ADAMS Accession No.: MLl1147A121 'viaemail NSIR/DSP/DDRSI LPL2-21PM LPL2-2ILA LPL 1*2/BC LPL 1*2/PM ISCPB/BC TOri BClayton CErlanger* HChernoff (REnnis for) GEMilier (JHughey for) 05/31/11 05/31111 06/08/11 06/08/11 06/08/11 OFFICIAL AGENCY RECORD