ML13232A258

Redacted Letter, Audit Report for 2/11-2/14/13 NRC Cyber Security Pilot Study, at the Plant Site in Avila Beach, CA, to Support Digital Replacement of Process Protection System License Amendment Request

ML13232A258
Person / Time
Site:	Diablo Canyon
Issue date:	09/17/2013
From:	Jennivine Rankin Plant Licensing Branch IV
To:	Halpin E Pacific Gas & Electric Co
Rankin J
References
TAC ME7522, TAC ME7523
Download: ML13232A258 (3)

Text

OFFICIAL USE ONLY SECbJRITY RlilATIiD INFORMATION UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 September 17, 2013 Mr. Edward D. Halpin Senior Vice President and Chief Nuclear Officer Pacific Gas and Electric Company Diablo Canyon Power Plant P.O. Box 56, Mail Code 104/6 Avila Beach, CA 93424 SUB~'ECT: DIABLO CANYON POWER PLANT, UNIT NOS. 1 AND 2 - REGULATORY AUDIT ON FEBRUARY 11-14, 2013, FOR THE CYBER SECURITY PILOT STUDY AT THE CS INNOVATIONIWESTINGHOUSE FACILITY IN SCOTTSDALE, ARIZONA (TAC NOS. ME7522 AND ME7523)

Dear Mr. Halpin:

By letter dated October 26, 2011, as supplemented by letters dated December 20, 2011, and April 2, April 30, June 6, August 2, September 11, November 27, and December 5,2012, and March 25, April 30, May 9, and May 30, 2013 (Agencywide Documents Access and Management System (ADAMS) Accession Nos. ML113070457, ML113610541, ML12094A072, ML12131A513, ML12170A837, ML12222A094, ML12256A308, ML13004A468, ML12342A149, ML13093A311, ML13121A089, ML13130A059, and ML13154A049, respectively), Pacific Gas and Electric (PG&E, the licensee), submitted a license amendment request (LAR) to the U.S.

Nuclear Regulatory Commission (NRC). The proposed LAR would provide a digital replacement of the Process Protection System (PPS) portion of the Reactor Trip System and Engineered Safety Features Actuation System at Diablo Canyon Power Plant, Units 1 and 2 (DCPP).

To support the NRC review, staff from the Office of Nuclear Security and Incident Response (NSIR), Cyber Security and Integrated Response Branch, is conducting a pilot study to determine if security measures taken by the licensee and vendor address regulatory requirements for cyber security under Title 10 of the Code of Federal Regulations Section 73.54, "Protection of digital computer and communication systems and networks." As part of this study, the staff visited CS InnovationslWestinghouse (CSI) facilities in Scottsdale, Arizona, on February 11-14, 2013. A regulatory audit report outlining NRC staff observations from this visit is enclosed.

A summary audit report will be developed at a later date that details the results of all audits conducted as part of the pilot study and follow-on reviews (subsequent audits related to the PPS replacement) conducted by NSIR staff for other design elements associated with the PPS replacement.

The Enclosure to this letter contains Security-Related Information. Upon separation from the Enclosure, this letter is DECONTROLLED.

OFFICIAl bJSE ONlY SECbJRITY RlilATIiD INFORMATION

OFFICIAL USE ONLY SECURITY RELATED INFORMATION E. Halpin - 2 The lifecycle processes review activities performed in conjunction with this audit are documented in a separate proprietary report that is being written by the staff from the NRC's Office of Nuclear Reactor Regulation (NRR) Instrumentation and Controls Branch.

If you have any questions, please contact me at 301-415-1530 or via e-mail at Jennivine. Rankin@nrc.gov.

Sincerely, Jennie K. Rankin, Project Manager Plant licensing Branch IV Division of Operating Reactor licensing Office of Nuclear Reactor Regulation Docket Nos. 50-275 and 50-323

Enclosure:

As stated cc (letter only): Distribution via listserv OFFICIAL USE ONLY SECURITY RELATED INFORMATION

OFFICIAL USE ONLY SECURITY RELATED INFORMATION E. Halpin -2 The lifecycle processes review activities performed in conjunction with this audit are documented in a separate proprietary report that is being written by the staff from the NRC's Office of Nuclear Reactor Regulation (NRR) Instrumentation and Controls Branch.

If you have any questions, please contact me at 301-415-1530 or via e-mail at Jennivine.Rankin@nrc.gov.

Sincerely, IRA!

Jennie K. Rankin, Project Manager Plant Licensing Branch IV Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-275 and 50-323

Enclosure:

As stated cc (letter only): Distribution via Listserv DISTRIBUTION:

PUBLIC RidsNsirDsp Resource LPL4 RlF RidsRgn4MailCenter Resource RidsAcrsAcnw_MailCTR Resource WKemper, NRRlDEJEICB RidsNrrDeEicb Resource RStattel, NRRlDE/EICB RidsNrrDorlLpl4 Resource RAlvarado, NRRlDEJEICB RidsNrrLAJBurkhardt Resource SMakor, RIV/DRS/EB2 RidsNrrPMDiabloCanyon Resource ELee, NSIR ADAMS Accession Nos. ltr/Audit Report (OUO-SRI) Ml13232A249; Redacted ltr Ml13232A258

.OFFICE NRRlDORULPL4/PM NRRlDORULPL4/PM NRRlDORULPL4/LA

,NAME MBartlett JRankin JBurkhardt

.DATE 08/19/13 915/13 8/22113 I OFFICE NSIRIDSP/CSIRB/BC NRRlDORULPL4/BC NRRlDORULPL4IPM l.

NAME CErianger MMarkley JRankin 4/24/13 9/17113 9/17/13 OFFICIAL RECORD COpy OFFICIAL USE ONLY SECURITY RELATED INFORMAnON