ML17237C075

Endorsement of Addendum 3, Dated August 2017, to NEI 08-09, Cyber Security Plan for Nuclear Power Reactors, Revision 6

ML17237C075
Person / Time
Site:	Nuclear Energy Institute
Issue date:	08/22/2017
From:	Perkins-Grew S Nuclear Energy Institute
To:	Andersen J Document Control Desk, Office of Nuclear Security and Incident Response
Shared Package
ML17237C074	List: ML17237C075 ML17237C076
References
Download: ML17237C075 (2)

Text

SUSAN PERKINS-GREW Senior Director, Nuclear Security & Incident Preparedness 1201 F Street, NW, Suite 1100 Washington, DC 20004 P: 202.739.8016 spg@nei.org nei.org August 22, 2017 Mr. James W. Andersen Director, Division of Security Policy Nuclear Security and Incident Response U.S. Nuclear Regulatory Commission Washington, DC 20555-0001

Subject:

Endorsement of Addendum 3, Dated August 2017, to NEI 08-09, Cyber Security Plan for Nuclear Power Reactors, Revision 6 Project Number: 689

Dear Mr. Andersen:

By letter dated April 28, 2010, the Nuclear Energy Institute (NEI) 1 submitted, on behalf of the nuclear energy industry, NEI 08-09, Cyber Security Plan for Nuclear Power Reactors, Revision 6, dated April 2010, for U.S. Nuclear Regulatory Commission (NRC) review and endorsement (NRC Agencywide Documents Access and Management System (ADAMS) Accession No. ML101180434). Subsequently, by letter dated May 5, 2010, the NRC informed NEI that NEI 08-09, Revision 6, is acceptable for use by licensees (ADAMS Accession No. ML101190371). NEI 08-09 provides a template for the implementation of the cyber security plan required by 10 CFR 73.54.

Lessons learned through licensee implementation efforts, and through a series of implementation workshops conducted during 2016 that included industry and NRC observers indicate that additional clarity on certain cyber security program elements discussed in NEI 08-09 is necessary. Accordingly, by letter dated June 29, 2017, NEI submitted three addendums to NEI 08-09, Revision 6.

The NRC provided comments to the industry at a public workshop on July 18, 2017, and the attached addendum has been revised to address the NRCs comments. Addendum 3 provides clarification to the cyber security controls documented in NEI 08-09, Revision 6, Appendix E, Section E.11, System and Services Acquisition.

1 The Nuclear Energy Institute (NEI) is the organization responsible for establishing unified industry policy on matters affecting the nuclear energy industry, including the regulatory aspects of generic operational and technical issues. NEI's members include all entities licensed to operate commercial nuclear power plants in the United States, nuclear plant designers, major architect/engineering firms, fuel cycle facilities, nuclear materials licensees, and other organizations and entities involved in the nuclear energy industry.

Mr. James W. Andersen August 22, 2017 Page 2 NEI requests that the NRC review and endorse Addendum 3, dated August 2017, to NEI 08-09, Revision 6, as soon as practical to enable use during upcoming inspections. If any revisions to these documents are desired, please include suggested wording and the technical data to support the proposed change(s).

If you have questions or require additional information, please contact William Gross (202-739-8123; wrg@nei.org).

Sincerely, Susan H. Perkins-Grew Attachments c: Mr. James D. Beardsley, NSIR/CSD, NRC NRC Document Control Desk