ML12339A112

Issuance of Amendments Regarding Revision of Cyber Security

ML12339A112
Person / Time
Site:	Turkey Point
Issue date:	12/17/2012
From:	Orf T Plant Licensing Branch II
To:	Nazar M Florida Power & Light Co
Saba, F E
References
TAC ME8879, TAC ME8880
Download: ML12339A112 (18)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 December 17, 2012 Mr. Mano Nazar Executive Vice President and Chief Nuclear Officer Florida Power and Light Company P.O. Box 14000 Juno Beach, Florida 33408-0420 SUB~IECT:

TURKEY POINT PLANT, UNITS 3 AND 4 - ISSUANCE OF AMENDMENTS REGARDING REVISION TO CYBER SECURITY PLAN MILESTONE 6 (TAC NOS. ME8879 AND ME8880)

Dear Mr. Nazar:

The Commission has issued the enclosed Amendment Nos. 256 and 252 to Renewed Facility Operating License Nos. DPR-31 and DPR-41 for the Turkey Point Plant, Units 3 and 4, respectively. These amendments consist of changes to the licenses in response to your application dated June 13, 2012.

The amendments revise the licenses to refer to a revised milestone scope in the Cyber Security Plan implementation schedule. Florida Power and Light Company (the licensee) is clarifying the scope of implementation milestone 6 in the Cyber Security Plan implementation schedule provided in the licensee's letter dated April 5, 2011, to apply to only technical cyber security controls.

A copy of the Safety Evaluation is also enclosed. The Notice of Issuance will be included in the Commission's biweekly Federal Register notice.

Sincerely,

-1 Tracy J. Orf, Project Manager Plant Licensing Branch 11-2 Division of Operator Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-250 and 50-251

Enclosures:

1. Amendment No. 256 to DPR-31

2. Amendment No. 252 to NPF-41

3. Safety Evaluation cc w/encls: Distribution via Listserv

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 FLORIDA POWER AND LIGHT COMPANY DOCKET NO. 50-250 TURKEY POINT PLANT, UNIT NO.3 AMENDMENT TO RENEWED FACILITY OPERATING LICENSE Amendment No. 256 Renewed License No. DPR-31

1.

The Nuclear Regulatory Commission (the Commission) has found that:

A.

The application for amendment by Florida Power and Light Company (the licensee) dated June 13, 2012, complies with the standards and requirements of the Atomic Energy Act of 1954, as amended (the Act) and the Commission's rules and regulations set forth in 10 CFR Chapter I; B.

The facility will operate in conformity with the application, the provisions of the Act, and the rules and regulations of the Commission; C.

There is reasonable assurance (i) that the activities authorized by this amendment can be conducted without endangering the health and safety of the public, and (ii) that such activities will be conducted in compliance with the Commission's regulations; D.

The issuance of this amendment will not be inimical to the common defense and security or to the health and safety of the public; and E.

The issuance of this amendment is in accordance with 10 CFR Part 51 of the Commission's regulations and all applicable requirements have been satisfied.

- 2

2.

Accordingly, the license is amended as indicated in the attachment to this license amendment, and paragraph 3.B of Renewed Facility Operating License No. DPR-31 is hereby amended to read as follows:

B.

Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 256 are hereby incorporated into this renewed license. The Environmental Protection Plan contained in Appendix B is hereby incorporated into this renewed license. The licensee shall operate the facility in accordance with the Technical Specifications and the Environmental Protection Plan.

3.

This license amendment is effective as of its date of issuance and shall be implemented by December 31,2012.

FOR THE NUCLEAR REGULATORY COMMISSION

Attachment:

Changes to the Operating License Date of Issuance: December 17, 2012

ATTACHMENT TO LICENSE AMENDMENT NO. 256 TO RENEWED FACILITY OPERATING LICENSE NO. DPR-31 DOCKET NO. 50-250 Replace P~ges 3 and 4 of Renewed Operating License DPR-31 with the attached Pages 3 and 4. The revised pages are identified by amendment number and contain marginal lines indicating the areas of change.

3 E.

Pursuant to the Act and 10 CFR Parts 40 and 70 to receive, possess, and use at any time 100 milligrams each of any source or special nuclear material without restriction to chemical or physical form, for sample analysis or instrument calibration or associated with radioactively contaminated apparatus; F.

Pursuant to the Act and 10 CFR Parts 30 and 70, to possess, but not separate, such byproduct and special nuclear materials as may be produced by the operation of Turkey Point Units Nos. 3 and 4.

3.

This renewed operating license shall be deemed to contain and is subject to the conditions specified in the following Commission regulations: 10 CFR Part 20, Section 30.34 of 10 CFR Part 30, Section 40.41 of 10 CFR Part 40, Sections 50.54 and 50.59 of 10 CFR Part 50, and Section 70.32 of 10 CFR Part 70; and is subject to all applicable provisions of the Act and to the rules, regulations, and orders of the Commission now or hereafter in effect, and is subject to the additional conditions specified below:

A.

Maximum Power Level The applicant is authorized to operate the facility at reactor core power levels not in excess of 2644 megawatts (thermal).

B.

Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 256 are hereby incorporated into this renewed license. The Environmental Protection Plan contained in Appendix B is hereby incorporated into this renewed license. The licensee shall operate the facility in accordance with the Technical Specifications and the Environmental Protection Plan.

C.

Final Safety Analysis Report The licensee's Final Safety Analysis Report supplement submitted pursuant to 10 CFR 54.21 (d), as revised on November 1, 2001, describes certain future inspection activities to be completed before the period of extended operation.

The licensee shall complete these activities no later than July 19, 2012.

The Final Safety Analysis Report supplement as revised on November 1, 2001, described above, shall be included in the next scheduled update to the Final Safety Analysis Report required by 10 CFR 50.71 (e)(4), following the issuance of this renewed license. Until that update is complete, the licensee may make changes to the programs described in such supplement without prior Commission approval, provided that the licensee evaluates each such change pursuant to the criteria set forth in 10 CFR 50.59 and otherwise complies with the requirements in that section.

Unit 3 Renewed License No. DPR-31 Amendment No. 256

4 D.

Fire Protection FPL shall implement and maintain in effect all provisions of the approved Fire Protection Program as described in the Updated Final Safety Analysis Report (UFSAR) for Turkey Point Units 3 and 4 and as approved in the Safety Evaluation Report (SER) dated March 21, 1979 and supplemented by NRC letters dated April 3, 1980, July 9, 1980, December 8, 1980, January 26, 1981, May 10,1982, March 27,1984, April 16. 1984, August 12, 1987, and by Safety Evaluations dated February 25, 1994, February 24, 1998, October 8, 1998, December 22, 1998. May 4,1999, and May 5, 1999, subject to the following provision:

The licensee may make changes to the approved Are Protection Program without prior approval of the Commission only if those changes would not

. adversely affect the ability to achieve and maintain safe shutdown in the event of a fire.

.E.

The licensee shall fully implement and maintain in effect all provisions of the Commission*approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provision of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822) and to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans, which contains Safeguards Information protected under 10 CFR 73.21, is entitled: "Ronda Power and Light

& FPL Energy Seabrook Physical Security Plan, Training and Qualification Plan and Safeguards Contingency Plan

• Revision 3 "submitted by letter dated May 18,2006.

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved cyber security plan (CSP), including changes made pursuant to the authority of 10 CFR 50J;~0 and 10 CFR 50.54{p). The Turkey Point Nuclear Generating Station CSP was approved by License Amendment No. 245 as supplemented by a change approved by License Amendment No. 256.

F.

1.

The licensee shall restrict the cOmbined number of fuel assemblies loaded in the existing spent fuel pool storage racks and cask pit rack to no more than the capacity of the spent fuel pool storage racks. This condition applies at all times. except during activities associated with a reactor core offload/reload refueling condition. This restriction will ensure the capability to unload and remove the cask pit rack when cask loading operations are necessary.

2. The licensee shall. establish two hold points within the rack installation procedure to ensure proper orientation of the cask rack in each unit's spent fuel pool. Verification of proper cask pit rack orientation will be implemented by an authorized Quality Control inspector during installation of the racks to ensure consistency with associated spent fuel pool criticality analysis assumptions.

Renewed License No. DPR-31 Amendment No. 256

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 FLORIDA POWER AND LIGHT COMPANY DOCKET NO. 50-251 TURKEY POINT PLANT UNIT NO.4 AMENDMENT TO RENEWED FACILITY OPERATING LICENSE Amendment No. 252 Renewed License No. DPR-41

1.

The Nuclear Regulatory Commission (the Commission) has found that:

A.

The application for amendment by Florida Power and Light Company (the licensee) dated June 13, 2012, complies with the standards and requirements of the Atomic Energy Act of 1954, as amended (the Act) and the Commission's rules and regulations set forth in 10 CFR Chapter I; B.

The facility will operate in conformity with the application, the provisions of the Act, and the rules and regulations of the Commission; C.

There is reasonable assurance (i) that the activities authorized by this amendment can be conducted without endangering the health and safety of the public, and (ii) that such activities will be conducted in compliance with the Commission's regulations; D.

The issuance of this amendment will not be inimical to the common defense and security or to the health and safety of the public; and E.

The issuance of this amendment is in accordance with 10 CFR Part 51 of the Commission's regulations and all applicable requirements have been satisfied.

- 2

2.

Accordingly, the license is amended as indicated in the attachment to this license amendment, and paragraph 3.B of Renewed Facility Operating License No. DPR-41 is hereby amended to read as follows:

B.

Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 252 are hereby incorporated into this renewed license. The Environmental Protection Plan contained in Appendix B is hereby incorporated into this renewed license. The licensee shall operate the facility in accordance with the Technical Specifications and the Environmental Protection Plan.

3.

This license amendment is effective as of its date of issuance and shall be implemented by December 31, 2012.

FOR THE NUCLEAR REGULATORY COMMISSION

~cM sie F. Quichocho, Chief Plant Licensing Branch 11-2 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation

Attachment:

Changes to the Operating License Date of Issuance: December 17, 2012

ATTACHMENT TO LICENSE AMENDMENT NO. 252 TO RENEWED FACILITY OPERATING LICENSE NO. DPR-41 DOCKET NO. 50-251 Replace Pages 3 and 4 of Renewed Operating License DPR-41 with the attached Pages 3 and 4. The revised pages are identified by amendment number and contain marginal lines indicating the areas of change.

3 E.

Pursuant to the Act and 10 CFR Parts 40 and 70 to receive, possess, and use at any time 100 milligrams each of any source or special nuclear material without restriction to chemical or physical form, for sample analysis or instrument calibration or associated with radioactively contaminated apparatus; F.

Pursuant to the Act and 10 CFR Parts 30 and 70, to possess, but not separate, such byproduct and special nuclear materials as may be produced by the operation of Turkey Point Units Nos. 3 and 4.

3.

This renewed operating license shall be deemed to contain and is subject to the conditions specified in the following Commission regulations: 10 CFR Part 20, Section 30.34 of 10 CFR Part 30, Section 40.41 of 10 CFR Part 40, Sections 50.54 and 50.59 of 10 CFR Part 50, and Section 70.32 of 10 CFR Part 70; and is subject to all applicable provisions of the Act and to the rules, regulations, and orders of the Commission now or hereafter in effect, and is subject to the additional conditions specified below:

A.

Maximum Power Level The applicant is authorized to operate the facility at reactor core power levels not in excess of 2644 megawatts (thermal).

B.

Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 252 are hereby incorporated into this renewed license. The Environmental Protection Plan contained in Appendix B is hereby incorporated into this renewed license. The licensee shall operate the facility in accordance with the Technical Specifications and the Environmental Protection Plan.

C.

Final Safety Analysis Report The licensee's Final Safety Analysis Report supplement submitted pursuant to 10 CFR 54.21(d), as revised on November 1,2001, describes certain future inspection activities to be completed before the period of extended operation.

The licensee shall complete these activities no later than April 10, 2013.

The Final Safety Analysis Report supplement as revised on November 1, 2001, described above, shall be included in the next scheduled update to the Final Safety Analysis Report required by 10 CFR 50.71 (e)(4), following the issuance of this renewed license. Until that update is complete, the licensee may make changes to the programs described in such supplement without prior Commission approval, provided that the licensee evaluates each such change pursuant to the criteria set forth in 10 CFR 50.59 and otherwise complies with the requirements in that section.

Unit 4 Renewed License No. DPR-41 Amendment No. 252

4 D.

Fire Protection FPL shall implement and maintain in eff~ct all provisions of the approved Fire Protection Program as described in the Updated Final Safety Analysis Report (UFSAR) for Turkey Point Units 3 and 4 and as approved in the Safety Evaluation Report (SER) dated March 21, 1979 and supplemented by NRC letters dated April 3, 1980, July 9, 1980, December 8, 1980, January 26,1981, May 10, 1982, March 27,1984, April 16, 1984, August 12, 1987, and by Safety Evaluations dated February 25, 1994, February 24, 1998, October 8, 1998, December 22,1998, May 4,1999, and May 5,1999, subject to the following provision:

The licensee may make changes to the approved Fire Protection Program without prior approval of the Commission only if those changes would not adversely affect the ability to achieve and maintain safe shutdown in the event of a fire.

E.

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provision of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822) and to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans, which contains Safeguards Information protected under 10 CFR 73.21, is entitled: "Florida Power and light

&FPL Energy Seabrook Physical Security Plan, Training and Qualification Plan and Safeguards Contingency Plan Revision 3," submitted by letter dated May 18, 2006.

The licensee shall fully implement and maintain in effect all proviSions of the Commission-approved cyber security plan (CSP), including changes made pursuant to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The Turkey Point Nuclear Generating Station CSP was approved by license Amendment No. 241 as supplemented by a change approved by license Amendment No. 252.

F.

1.

The licensee shall restrict the combined number of fuel assemblies loaded in the existing spent fuel pool storage racks and cask pit rack to no more than the capacity of the spent fuel pool storage racks. This condition applies at all times, except during activities associated with a reactor core offload/reload refueling condition. This restriction will ensure the capability to unload and remove the cask pit rack when cask loading operations are necessary.

2. The licensee shall establish two hold points within the rack Installation procedure to ensure proper orientation of the cask rack in each unit's spent fuel pool. Verification of proper cask pit rack orientation will be implemented by an authorized Quality Control inspector during installation of the racks to ensure consistency with associated spent fuel pool criticality analysis assumptions.

Renewed License No. DPR-41 Amendment No. 252

UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 SAFETY EVALUATION BY THE OFFICE OF NUCLEAR REACTOR REGULATION RELATED TO AMENDMENT NOS. 256 AND 252 TO FACILITY OPERATING LICENSE NOS. DPR-31 AND DPR-41 FLORIDA POWER AND LIGHT COMPANY TURKEY POINT NUCLEAR PLANT, UNIT NOS. 3 AND 4 DOCKET NOS. 50-250 AND 50-251

1.0 INTRODUCTION

By application dated June 13, 2012, (Agencywide Documents Access and Management System (ADAMS) Accession No. ML12179A283), Florida Power and Light Company (FPL, the licensee) requested changes to the renewed facility operating licenses for Turkey Point, Units 3 and 4.

The proposed changes would revise the scope of Cyber Security Plan (CSP) Implementation Schedule Milestone #6 and the existing license conditions in the renewed facility operating licenses. Milestone #6 of the CSP implementation schedule concerns the identification, documentation, and implementation of cyber security controls (technical, operational, and management) for critical digital assets (CDAs) related to target set equipment. FPL is requesting to modify the scope of Milestone #6 to apply to the technical cyber security controls only. The operational and management controls, as described in Nuclear Energy Institute (NEI) 08-09, Revision 6, would be implemented concurrent with the full implementation of the Cyber Security Program (Milestone #8). Thus, all CSP activities would be fully implemented by the completion date identified in Milestone #8 of the licensee's CSP implementation schedule.

Portions of the letter dated June 13, 2012, contain sensitive unclassified non-safeguards information and, accordingly, those portions are withheld from public disclosure.

2.0 REGULATORY EVALUATION

The U.S. Nuclear Regulatory Commission (NRC) staff reviewed and approved the licensee's existing CSP implementation schedule by License Amendment Nos. 245 and 241, dated July 29,2011 (ADAMS Accession No. ML11195A147), concurrent with the incorporation of the CSP into the facility current licensing basis. The NRC staff considered the following regulatory requirements and guidance in its review of the current license amendment request to modify the existing CSP implementation schedule:

Enclosure

- 2

• Title 10 of the Code of Federal Regulations (10 CFR), Part 73, Section 73.54 states:

"Each [CSP] submittal must include a proposed implementation schedule.

Implementation of the licensee's Cyber Security Program must be consistent with the approved schedule."

• The licensee's renewed facility operating licenses include license conditions that require the licensee to fully implement and maintain in effect all provisions of the Com mission-approved CSP.

• Amendment Nos. 245 and 241, dated July 29, 2011, which approved the licensee's CSP and implementation schedule, included the following statement: "the implementation of the [CSP], including the key intermediate milestone dates and the full implementation date shall be in accordance with the implementation schedule submitted by the licensee and approved by the NRC. All subsequent changes to the NRC-approved CSP implementation schedule, thus, will require prior NRC approval pursuant in 10 CFR 50.90."

In a letter to the Nuclear Energy Institute (NEI) dated March 1, 2011 (ADAMS Accession No. ML110070348), the NRC staff acknowledged that the cyber security implementation schedule template was "written generically and licensees that use the template to develop their proposed implementation schedules may need to make changes to ensure the submitted schedule accurately accounts for site-specific activities."

3.0 TECHNICAL EVALUATION

Amendment Nos. 245 and 241 to Renewed Facility Operating License Nos. DPR-31 and DPR-41 for Turkey Point Nuclear Generating Station, Units 3 and 4, respectively, were issued on July 29, 2011. The NRC staff also approved the licensee's CSP implementation schedule, as discussed in the safety evaluation issued with the amendments. The implementation schedule had been submitted by the licensee based on a template prepared by NEI (ADAMS Accession No. ML110600218), which the NRC staff found acceptable for licensees to use to develop their CSP implementation schedules. The licensee's proposed implementation schedule for the Cyber Security Program identified completion dates and bases for the following eight milestones:

1) Establish the Cyber Security Assessment Team (CSAT);

2) Identify Critical Systems and CDAs;

3) Install a deterministic one-way device between lower level devices and higher level devices;

4) Implement the security control "Access Control For Portable And Mobile Devices";

5) Implement observation and identification of obvious cyber-related tampering to existing insider mitigation rounds by incorporating the appropriate elements;

6) Identify, document, and implement cyber security controls as per "Mitigation of Vulnerabilities and Application of Cyber Security Controls" for CDAs that could adversely impact the design function of physical security target set equipment;

7) Commence ongoing monitoring and assessment activities for those target set CDAs whose security controls have been implemented; and

8) Fully implement the CSP.

- 3 3.1 Licensee's Proposed Change Currently, Milestone #6 of Turkey Point Nuclear Generating Station CSP requires FPL to identify, document, and implement cyber security controls for CDAs that could adversely impact the design function of physical security target set equipment by December 31,2012. These cyber security controls consist of technical, operational and management security controls. In its June 13, 2012, application, FPL proposed to modify Milestone #6 to change the scope of the cyber security controls due to be implemented on December 31,2012, to include only the NEI 08-09, Revision 6, Appendix 0 technical security controls. FPL proposes to amend its CSP to provide that operational and management security controls, identified in Milestone #6, will be fully implemented by a later date, which is the completion date identified in Milestone #8 of the CSP implementation schedule. The licensee stated that implementing the technical cyber security controls for target set CDAs provides a high degree of protection against cyber-related attacks that could lead to radiological sabotage. The licensee further stated that many of its existing programs are primarily procedure-based programs and must be implemented in coordination with the comprehensive Cyber Security Program. The licensee also stated that the existing programs currently in place at Turkey Point Nuclear Generating Station (e.g., physical protection, maintenance, configuration management, and operating experience) provide sufficient operational and management cyber security protection during the interim period until the Cyber Security Program is fully implemented.

3.2 NRC Staff Evaluation The intent of the cyber security implementation schedule was for licensees to demonstrate ongoing implementation of their Cyber Security Program prior to full implementation, which is set for the date specified in Milestone #8. In addition to Milestone #6 and its associated activities, licensees will be completing six other milestones (Milestones #1 through #5 and Milestone #7) by December 31,2012. Activities include establishing a CSAT, identifying critical systems and CDAs, installing deterministic one-way devices between defensive levels, implementing access control for portable and mobile devices, implementing methods to observe and identify obvious cyber-related tampering, and conducting ongoing monitoring and assessment activities for target set CDAs. In the aggregate, the interim milestones demonstrate ongoing implementation of the Cyber Security Program at Turkey Point Nuclear Generating Station.

The NRC staff has reviewed the licensee's evaluation of the proposed change in its submittal dated June 13, 2012, and finds that by completing Milestones #1 through #5, Milestone #6 with implementation of technical controls to target set CDAs, and Milestone #7, Turkey Point Nuclear Generating Station will have an acceptable level of cyber security protection until full program implementation is achieved. Technical cyber security controls include access controls, audit and accountability, CDA and communications protection, identification and authentication, and system hardening. These controls are executed by computer systems, as opposed to people, and consist of hardware and software controls that provide automated protection to a system or application. Implementation of technical cyber security controls promotes standardization, trust, interoperability, connectivity, automation, and increased efficiency. For these reasons, the NRC staff concludes that the licensee's approach is acceptable.

- 4 The NRC staff also recognizes that full implementation of operational and management cyber security controls in accordance with requirements of the Turkey Point Nuclear Generating Station CSP will be achieved with full implementation of the Turkey Point Nuclear Generating Station Cyber Security Program by the date set in Milestone #8. That is, all required elements for the operational and management cyber security controls in accordance with the Turkey Point Nuclear Generating Station CSP will be implemented in their entirety at the time of full implementation of the CSP.

The NRC staff does not regard the CSP milestone implementation dates as regulatory commitments that can be changed unilaterally by the licensee, particularly in light of the regulatory requirement at 10 CFR 73.54, that "[i]mplementation of the licensee's cyber security program must be consistent with the approved schedule." As the NRC staff explained in its letter to all operating reactor licensees dated May 9, 2011 (ADAMS Accession No. ML110980538), the implementation of the plan, including the key intermediate milestone dates and the full implementation date shall be in accordance with the implementation schedule submitted by the licensee and approved by the NRC. All subsequent changes to the NRC-approved CSP implementation schedule, thus, will require prior NRC approval pursuant in 10 CFR 50.90.

3.3 Revision to License Condition By letter dated June 13,2012, the licensee proposed to modify Paragraph 3.E of Renewed Facility Operating License Nos. DPR-31 and DPR-41 for Turkey Point Nuclear Generating Station, Units 3 and 4, respectively, which provide license conditions to require the licensee to fully implement and maintain in effect all provisions of the NRC-approved CSP.

The license condition in Paragraph 3.E of Renewed Operating License No. DPR-31 for Turkey Point Nuclear Generating Station, Unit 3, is modified as follows:

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provision of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822) and to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans, which contains Safeguards Information protected under 10 CFR 73.21, is entitled: "Florida Power and Light &

FPL Energy Seabrook Physical Security Plan, Training and Qualification Plan and Safeguards Contingency Plan - Revision 3" submitted by letter dated May 18, 2006.

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved cyber security plan (CSP), including changes made pursuant to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The Turkey Point Nuclear Generating Station CSP was approved by License Amendment No. 245 as supplemented by a change approved by License Amendment No. 256.

-5 The license condition in Paragraph 3.E of Renewed Operating License No. DPR-41 for Turkey Point Nuclear Generating Station, Unit 4, is modified as follows:

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provision of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822) and to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The combined set of plans, which contains Safeguards Information protected under 10 CFR 73.21, is entitled: "Florida Power and Light

& FPL Energy Seabrook Physical Security Plan, Training and Qualification Plan and Safeguards Contingency Plan Revision 3," submitted by letter dated May 18, 2006.

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved cyber security plan (CSP), including changes made pursuant to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The Turkey Point Nuclear Generating Station CSP was approved by License Amendment No. 241 as supplemented by a change approved by License Amendment No. 252.

3.4 Summary Based on its review of the licensee's submissions, the NRC staff concludes that the proposed changes to Milestone #6 of the licensee's CSP implementation schedule are acceptable. The NRC staff also concludes that, upon full implementation of the licensee's Cyber Security Program, the requirements of the licensee's CSP and 10 CFR 73.54 will be met. Therefore, the NRC staff finds the proposed changes acceptable.

4.0 STATE CONSULTATION

Based upon a letter dated May 2,2003, from Michael N. Stephens of the Florida Department of Health, Bureau of Radiation Control, to Brenda L. Mozafari, Senior Project Manager, NRC, the State of Florida does not desire notification of issuance of license amendments.

5.0 ENVIRONMENTAL CONSIDERATION

These amendments relate solely to safeguards matters and do not involve any significant construction impacts. Accordingly, these amendments meet the eligibility criteria for categorical exclusion set forth in 10 CFR 51.22(c)(12). Pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the issuance of these amendments.

6.0 CONCLUSION

The NRC staff has concluded, based on the considerations discussed above, that: (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner; (2) there is reasonable assurance that such activities will be conducted in compliance with the Commission's regulations; and (3) the issuance of the

- 6 amendment will not be inimical to the common defense and security or to the health and safety of the public.

Principal Contributor: Monika Coflin Date: December 17, 2012

ML12339A112 OFFICE LPL2-2/PM LPL2-2/LA NSIRlDSP/CSIRB* OGC NLO LPL2-2/BC LPL2-2/PM NAME TOrf BClayton CErlanger BMizuno JQuichocho TOrf DATE 12/5/12 12/5/12 8130/12 12/6/12 12/17/12 12/17/12

• bymemo