ML13219B135

Cyber Security Notification Letter

ML13219B135
Person / Time
Site:	Saint Lucie
Issue date:	08/06/2013
From:	Mark King NRC/RGN-II/DRS/EB2
To:	Nazar M Florida Power & Light Co
References
IR-13-404
Download: ML13219B135 (6)

Text

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION UNITED STATES NUCLEAR REGULATORY COMMISSION REGION II 245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 August 6, 2013 Mr. Mano Nazar Executive Vice President and Chief Nuclear Officer Florida Power and Light Company P.O. Box 14000 Juno Beach, FL 33408-0420

SUBJECT:

ST. LUCIE PLANT - NOTIFICATION OF CYBER SECURITY TI MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC INSPECTION REPORT NO. 05000335/2013404 AND 05000389/2013404)

Dear Mr. Nazar:

The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)

Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements specified by the conditions of your operating license at the St Lucie Plant on December 9 - 13, 2013. The inspection team will be led by Mr. Jigar Patel, Reactor Inspector, of the NRC RII office. The team will be composed of personnel from the NRC RII office and personnel from the NRC office of Nuclear Security and Incident Response (NSIR). The inspection will be conducted in accordance with Temporary Instruction (TI) 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7. The TI inspection will be performed to evaluate and verify your ability to meet the interim milestone requirements of the NRCs Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73, Section 54, Protection of Digital Computer and Communication Systems and Networks.

During a telephone conversation on July 30, 2013, Mr. Patel confirmed with Mr. D. Checkitt of your staff, arrangements for an information-gathering site visit and a one-week onsite inspection. The schedule is as follows:

• Information gathering visit: November 5 - 7, 2013

• Onsite inspection: December 9 - 13, 2013 The purpose of the information gathering visit is to: (1) obtain information and documentation needed to support the TI inspection; (2) become familiar with the St Lucie Plant Cyber Security Program and plant layout; and (3) arrange administrative details, such as office space, availability of knowledgeable office personnel and to ensure unescorted site access privileges.

Enclosure transmitted herewith contains SUNSI. When separated from enclosure, this transmittal document is decontrolled LIMITED INTERNAL DISTRIBUTION PERMITTED OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION M. Nazar 2 In order to assure a productive TI inspection, we have enclosed a request for documents needed to ensure the inspectors are adequately prepared. These documents have been divided into three groups (I, II, & III). Group I lists information necessary to aid the inspectors in planning for the TI inspection prior to the information gathering visit. It is requested that this information be provided to the lead inspector via mail no later than October 8, 2013. Group II lists information and possible areas for discussion necessary to assist the inspectors during the TI inspection. It is requested this information be available during the information gathering visit (November 5, 2013). Group III consists of those items that the inspectors will review, or need access to, during the TI inspection. Group III also lists the information necessary to aid the inspectors in tracking questions and answers identified as a result of the TI inspection. It is requested that this information be provided to the lead inspector as the information is generated during the TI inspection. It is important that all of these documents are up to date and complete in order to minimize the number of additional documents requested during the preparation and/or the onsite portions of the TI inspection.

This letter does not contain new or amended information collection requirements subject to the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection requirements were approved by the Office of Management and Budget, control number 3150-0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a request for information or an information collection requirement unless the requesting document displays a currently valid Office of Management and Budget control number.

Your cooperation and support during this inspection will be appreciated. If you have questions concerning this inspection, or the inspection team's information or logistical needs, please contact Mr. Patel at (404) 997-4577, or me at (404) 997-4511.

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION M. Nazar 3 In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's document system, ADAMS.

ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room). However, because of the security-related concerns contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters enclosure will not be available for public inspection.

Sincerely,

/RA/

Michael F. King, Chief Engineering Branch 2 Division of Reactor Safety Docket No.: 50-335, 50-389 License No.: DPR-67, NPF-16

Enclosure:

Document Request For Cyber Security Temporary Instruction (TI) 2201/004 Interim Milestones 1-7 Inspection (OFFICIAL USE ONLY) cc: (See page 4)

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

_________________________ xG SUNSI REVIEW COMPLETE G FORM 665 ATTACHED OFFICE RII:DRS RII:DRS SIGNATURE *RA RA NAME JIGAR KING DATE 8/ 6 /2013 8/ 6 /2013 8/ /2013 8/ /2013 8/ /2013 8/ /2013 8/ /2013 E-MAIL COPY? YES NO YES NO YES NO YES NO YES NO YES NO YES NO OFFICIAL USE ONLY - SECURITY RELATED INFORMATION M. Nazar 4 cc:

Joseph Jensen Site Vice Presiden St. Lucie Nuclear Plant 6501 S. Ocean Drive Jensen Beach, FL 34957 Eric Katzman Licensing Manager St. Lucie Nuclear Plant 6501 South Ocean Drive Jensen Beach, FL 34957-2000 OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION 5

Letter to Mano Nazar from Michael F. King dated Augusst 6, 2013.

SUBJECT:

ST LUCIE PLANT - NOTIFICATION OF CYBER SECURITY TI MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC INSPECTION REPORT NO. 05000335/2013404 AND 05000389/2013404)

Distribution:

RidsNrrPMStLucie Resource C. Evans, RII EICS L. Douglas, RII EICS B. Westreich, NSIR (hard copy w/ encl)

RIDSNRRDIRS Distribution W/O OUO:

PUBLIC OFFICIAL USE ONLY - SECURITY RELATED INFORMATION