ML15070A253

From kanterella
Jump to navigation Jump to search
Notification of Cyber Security Ti Milestones 1-7 and Target Set Inspections and Request for Information (NRC IR 0500040/2015404)
ML15070A253
Person / Time
Site: Harris Duke Energy icon.png
Issue date: 03/09/2015
From: Scott Shaeffer
NRC/RGN-II/DRS/EB2
To: Waldrep B
Progress Energy Carolinas
References
IR 2015404
Download: ML15070A253 (6)


See also: IR 05000040/2015404

Text

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

UNITED STATES

NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200

ATLANTA, GEORGIA 30303-1257

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

March 9, 2015

Mr. Benjamin C. Waldrep

Vice President

Shearon Harris Nuclear Power Plant

5413 Shearon Harris Rd

New Hill, NC 27562-0165

SUBJECT:

SHEARON HARRIS NUCLEAR POWER PLANT - NOTIFICATION OF CYBER

SECURITY TI MILESTONES 1-7 AND TARGET SET INSPECTIONS AND

REQUEST FOR INFORMATION (NRC INSPECTION REPORT NO.

05000400/2015404)

Dear Mr. Waldrep:

The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)

Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements

specified by the conditions of your operating license at the Shearon Harris Nuclear Power Plant

on June 1 - 5, 2015. The inspection team will be led by Mrs. Melana Singletary, Reactor

Inspector, of the NRC RII office. The team will be composed of personnel from the NRC RII

office and personnel from the NRC office of Nuclear Security and Incident Response (NSIR).

The inspection will be conducted in accordance with Temporary Instruction (TI) 2201/004,

Inspection of Implementation of Interim Cyber Security Milestones 1-7. The TI inspection will

be performed to evaluate and verify your ability to meet the interim milestone requirements of

the NRCs Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73,

Section 54, Protection of Digital Computer and Communication Systems and Networks.

In addition, the NRC will conduct an inspection of the Target Set program. The inspection will

be led by Mr. Jigar Patel. The inspection will be conducted in accordance with Inspection

Procedure 71130.14, Review of Power Reactor Target Sets. The inspection will be performed

to ensure the operational program established for implementation at a plant licensed in

accordance with Title 10 of the Code of Federal Regulations (10 CFR) Part 50 meet all NRC

requirements and objectives for developing, maintaining, and documenting target sets.

Mr. Jigar Patel will need to work out of a conference room where he can access SGI

documents. If it is easier for you, he can use a room in the security office area instead.

On March 3, 2015, during a telephone conversation between Mrs. Ingrid Nordby and

Mr. Mike Wallace of your staff, and Mrs. Melana Singletary, NRC RII, our respective staff,

confirmed arrangements for a three-day information gathering onsite visit and a one-week

onsite inspection. The schedule is as follows:

Information gathering visit: May 11 - 13, 2015

Onsite inspection: June 1 - 5, 2015

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

B. Waldrep

2

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

The purpose of the information gathering visit is to: (1) obtain information and documentation

needed to support the inspection; (2) become familiar with the Shearon Harris Nuclear Power

Plant Cyber Security Program and plant layout; and (3) arrange administrative details, such as

office space, availability of knowledgeable station personnel and to ensure unescorted site

access privileges. In order to assure a productive inspection, we have enclosed a request for

documents needed to ensure the inspectors are adequately prepared. These documents have

been divided into five groups (I, II, III, IV, & V). Group I lists information necessary to aid the

inspectors in planning for the TI inspection prior to the information gathering visit. It is

requested that this information be provided to the lead inspector via mail no later than April 13,

2015. Group II lists information and possible areas for discussion necessary to assist the

inspectors during the TI inspection. It is requested this information be available during the

information gathering visit beginning May 11, 2015. Group III consists of those items that the

inspectors will review, or need access to, during the TI inspection. Group III also lists the

information necessary to aid the inspectors in tracking questions and answers identified as a

result of the TI inspection. Group IV list information necessary to aid the inspectors in planning

for the Target Set inspection. Group V consist of those items that the inspectors will review or

will need access to, during the Target Set inspection.

It is requested that this information be provided to the lead inspectors. It is important that all of

these documents are up to date and complete in order to minimize the number of additional

documents requested during the preparation and/or the onsite portions of the inspections.

This letter does not contain new or amended information collection requirements subject to the

Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection

requirements were approved by the Office of Management and Budget, control number 3150-

0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a

request for information or an information collection requirement unless the requesting document

displays a currently valid Office of Management and Budget control number.

Your cooperation and support during this inspection will be appreciated. If you have questions

concerning this inspection, or the inspection team's information or logistical needs, please

contact Mrs. Singletary at (404) 997-4752 or Mr. Patel at (404) 997-4577.

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

B. Waldrep

3

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be

available electronically for public inspection in the NRC Public Document Room or from the

Publicly Available Records (PARS) component of NRC's document system, ADAMS. ADAMS is

accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the Public

Electronic Reading Room). However, because of the security-related concerns contained in the

enclosure, and in accordance with 10 CFR 2.390, a copy of this letters enclosure will not be

available for public inspection.

Sincerely,

/RA/

Scott M. Shaeffer, Chief

Engineering Branch 2

Division of Reactor Safety

Docket Nos.: 50-400

License Nos.: NFP-63

Enclosure:

Document Request for Cyber Security Temporary

Instruction (TI) 2201/004 Interim Milestones 1-7 Inspection

(OFFICIAL USE ONLY)

cc: (See page 4)

_ML15070A253______________

SUNSI REVIEW COMPLETE

FORM 665 ATTACHED

OFFICE

RII:DRS

RII:DRS

RII:DRS

SIGNATURE

MJS6

SMS

JJP3

NAME

SINGLETARY

SHAEFFER

PATEL

DATE

3/ 6/2015

3/ 9 /2015

3/9/2015

E-MAIL COPY?

YES

NO

YES

NO YES

NO

YES

NO

YES

NO YES

NO

YES

NO

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

B. Waldrep

4

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

cc:

David H. Corlett

Manager, Regulatory Affairs

Shearon Harris Nuclear Power Plant

5413 Shearon Harris Rd

New Hill, NC 27562-0165

John D. Dufner

Plant Manager

Shearon Harris Nuclear Power Plant

5413 Shearon Harris Rd

New Hill, NC 27562-0165

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

5

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

Letter to Benjamin C. Waldrep from Scott M. Shaeffer dated .

SUBJECT:

SHEARON HARRIS NUCLEAR POWER PLANT - NOTIFICATION OF CYBER

SECURITY TI MILESTONES 1-7 AND TARGET SET INSPECTIONS AND

REQUEST FOR INFORMATION (NRC INSPECTION REPORT NO.

05000400/2015404)

Distribution:

RidsNrrPMHarris Resource

M. Layton, NSIR

RIDSNRRDIRS

PUBLIC