ML17212A633

07-20-17 NEI Request Endorsement of NEI 0809 Addendums 2 and 4

ML17212A633
Person / Time
Site:	Nuclear Energy Institute
Issue date:	07/20/2017
From:	Perkins-Grew S Nuclear Energy Institute
To:	Andersen J NRC/NSIR/DPCP
Pantalo C
Shared Package
ML17212A630	List: ML17212A632 ML17212A633 ML17212A635
References
Download: ML17212A633 (2)

Text

SUSAN PERKINS-GREW Sr. Director, Nuclear Security & Incident Preparedness 1201 F Street, NW, Suite 1100 Washington, DC 20004 P: 202.739.8016 spg@nei.org nei.org July 20, 2017 Mr. James W. Andersen Director, Division of Security Policy Nuclear Security and Incident Response U.S. Nuclear Regulatory Commission Washington, DC 20555-0001

Subject:

Endorsement of Revised Addendums 2 and 4 to NEI 08-09, Cyber Security Plan for Nuclear Power Reactors, Revision 6, Dated April 2010 Project Number: 689

Dear Mr. Andersen:

By letter dated April 28, 2010, the Nuclear Energy Institute (NEI) 1 submitted, on behalf of the nuclear energy industry, NEI 08-09, Cyber Security Plan for Nuclear Power Reactors, Revision 6, dated April 2010, for U.S. Nuclear Regulatory Commission (NRC) review and endorsement (NRC Agencywide Documents Access and Management System (ADAMS) Accession No. ML101180434). Subsequently, by letter dated May 5, 2010, the NRC informed NEI that NEI 08-09, Revision 6, is acceptable for use by licensees (ADAMS Accession No. ML101190371). NEI 08-09 provides a template for the implementation of the cyber security plan required by 10 CFR 73.54.

Lessons learned through licensee implementation efforts, and through a series of implementation workshops conducted during 2016 that included industry and NRC observers indicate that additional clarity on certain cyber security program elements discussed in NEI 08-09 is necessary. Accordingly, by letter dated June 29, 2017, NEI submitted three addendums to NEI 08-09, Revision 6.

The NRC provided comments to the industry at a public workshop on July 18, 2017, and attached are the two addendums that have been revised to address the NRCs comments. Addendum 2 provides approaches 1

The Nuclear Energy Institute (NEI) is the organization responsible for establishing unified industry policy on matters affecting the nuclear energy industry, including the regulatory aspects of generic operational and technical issues. NEI's members include all entities licensed to operate commercial nuclear power plants in the United States, nuclear plant designers, major architect/engineering firms, fuel cycle facilities, nuclear materials licensees, and other organizations and entities involved in the nuclear energy industry.

Mr. James W. Andersen July 20, 2017 Page 2 to implement the cyber attack detection, response, and recovery. Addendum 4 provides clarification to the cyber security controls documented in NEI 08-09, Revision 6, Appendix E, Section E.5, Physical and Operational Environment Protection.

NEI requests that the NRC review and endorse Addendums 2 and 4 to NEI 08-09, Revision 6, dated April 2010, as soon as practical to enable use during upcoming inspections. If any revisions to these documents are desired, please include suggested wording and the technical data to support the proposed change(s).

If you have questions or require additional information, please contact William Gross (202-739-8123; wrg@nei.org).

Sincerely, Susan H. Perkins-Grew Attachments c: Mr. James D. Beardsley, NSIR/CSD, NRC NRC Document Control Desk