ML13339A428

Transmittal Memorandum for Regulatory Audit Report for the August 6, 2013 Through August 8, 2013 Cyber Security Pilot Study at Dcnpp Avila Beach, CA

ML13339A428
Person / Time
Site:	Diablo Canyon
Issue date:	04/28/2014
From:	Russell Felts Office of Nuclear Security and Incident Response
To:	Markley M Plant Licensing Branch IV
Lee E
Shared Package
ML13339A447	List: ML13339A428
References
TAC ME7522, TAC ME7553
Download: ML13339A428 (2)

Text

OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION April 28, 2014 MEMORANDUM TO: Michael Markley, Chief Plant Licensing Branch LPL4 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation FROM: Russell Felts, Deputy Director /RA/

Cyber Security Directorate Office of Nuclear Security and Incident Response

SUBJECT:

CYBER SECURITY PILOT STUDY FOR THE DIABLO CANYON NUCLEAR POWER PLANT FACILITY IN AVILA BEACH, CALIFORNIA Plant Name: Diablo Canyon Nuclear Power Plant, Units 1 and 2 Licensee: Pacific Gas and Electric (PG&E)

TAC Nos: ME7522 and ME7523 Docket Nos: 50-275, and 50-323 Operating Licenses: DPR-80 and DPR-82 Responsible Project Manager: B. Benney Review Organization: Cyber Security Directorate Review Status: Review in Progress As part of the Office of Nuclear Security and Incident Responses (NSIR) pilot study to review how licensees are addressing security controls associated with the modification of critical digital assets as specified in their U.S. Nuclear Regulatory Commission (NRC)-approved cyber security plans, staff from NSIR, Cyber Security Directorate (CSD), conducted a pilot study to determine if security measures taken by the licensee and associated vendors address regulatory requirements under Title 10 of the Code of Federal Regulations 73.54, Protection of Digital Computer and Communication Systems and Networks. The pilot study is performed in coordination with the NRCs Office of Nuclear Reactor Regulation, which is currently leading the review of PG&E submitted license amendment request to the NRC for replacement of the Diablo Canyon Nuclear Power Plant (DCNPP) Eagle 21 Process Protection System (PPS) with a new digital PPS (Agencywide Documents Access and Management System (ADAMS)

Accession No. ML11307A332).

Enclosures transmitted herewith CONTACT: Eric Lee, NSIR/CSD contain Security-Related 301-287-3461 Information. When separated from enclosures, this transmittal document is decontrolled.

OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION M. Markley As part of this study, the staff visited the following three facilities: (1) the Invensys Operations Management (IOM) facility in Lake Forest, California from November 13, 2012 through November 16, 2012; (2) the CS Innovation (CSI) facility in Scottsdale, Arizona from February 11, 2013 through February 14, 2013; and (3) the DCNPP facility located in Avila Beach, California from August 6, 2013 through August 8, 2013. The staffs observations from the IOM and CSI facility visits are respectively documented in ADAMS Accession No. ML12361A442 and ML13232A249. The staffs observations from the DCNPP facility visit are provided in Enclosure 1 and a summary of all of the visits is provided in Enclosure 2.

Enclosures:

1. Staffs Observations from DCNPP facility visit

2. Summary of Visits OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION

ML12361A442 and ML13232A249. The staffs observations from the DCNPP facility visit are provided in Enclosure 1 and a summary of all of the visits is provided in Enclosure 2.

Enclosures:

1. Staffs Observations from DCNPP facility visit

2. Summary of Visits DISTRIBUTION:

CSD r/f ADAMS Accession No.: ML13339A447, Pkg. ML13339A447 OFFICE NSIR/CSD DD:NSIR/CSD NAME ELee RFelts DATE 12/12/13 04/28/14