ML18226A006

From kanterella
Jump to navigation Jump to search
NRC Response to NEI Addendum 5 Re Cyber Security Plan for Nuclear Power Reactors, Revision 6
ML18226A006
Person / Time
Site: Nuclear Energy Institute
Issue date: 08/17/2018
From: Andersen J
NRC/NSIR/DPCP
To: Perkins-Grew S
Nuclear Energy Institute
Lawson-Jenkins K
Shared Package
ML18226A004 List:
References
Download: ML18226A006 (2)


Text

August 17, 2018 Ms. Sue Perkins-Grew, Sr. Director Nuclear Security & Incident Preparedness Nuclear Energy Institute 1201 F Street, NW, Suite 1100 Washington, DC 20004

SUBJECT:

ENDORSEMENT OF ADDENDUM 5 TO NUCLEAR ENERGY INSTITUTE 08-09, CYBER SECURITY PLAN FOR NUCLEAR POWER REACTORS, REVISION 6, DATED APRIL 2010

Dear Ms. Perkins-Grew,

In your letter dated July 31, 2018 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML18226A005), you requested that the U.S. Nuclear Regulatory Commission (NRC) staff review and endorse the Nuclear Energy Institutes (NEIs) Addendum 5 to guidance document NEI 08-09, Cyber Security Plan for Nuclear Power Reactors, Revision 6, dated April 2010 (ADAMS Accession No. ML101180437). The purpose of this Addendum is to enhance the clarity and consistency in implementation of licensees cyber security plans. The Addendum also provides support to the NRC in our oversight activities.

The NRC found NEI 08-09, Revision 6 acceptable for use (with exceptions that are applicable) in a letter dated May 5, 2010 (ADAMS Accession No. ML101190371). The primary focus of NEI 08-09, Revision 6 was to provide an alternate cyber security plan template for use by licensees to comply with the requirements of Title 10 of the Code of Federal Regulations (10 CFR) Section 73.54.

The NRC staff has reviewed Addendum 5 and confirms that the guidance proposed in the document is acceptable for use by industry with the following exception:

In the last paragraph of section 2.3 Vulnerability Screening, the words assets that protect or inherit controls for multiple CDAs should be assets that protect or provide inherited controls for multiple CDAs. This editorial text change clarifies the intent of the original text.

If you have any questions, please contact Mr. James Beardsley at (301) 287-0908 or james.beardsley@nrc.gov.

Sincerely,

/RA David Curtis Acting for/

James Andersen, Director Division of Physical and Cyber Security Policy Office of Nuclear Security and Incident Response

S. Perkins-Grew 2 LETTER TO SUE PERKINS-GREW CONCERNING ENDORSEMENT OF ADDENDUM 5 TO NEI 08-09, CYBER SECURITY PLAN FOR NUCLEAR POWER REACTORS, REVISION 6, DATED APRIL 2010 DATED: AUGUST 17, 2018 DISTRIBUTION:

KLawson-Jenkins/NSIR ELee/NSIR ADAMS Accession Number: ML18226A004 OFC NSIR/DPCP/CSB NSIR/DPCP/CSB NSIR/DPCP NAME C. Pantalo J. Beardsley (D. Curtis for) J. Andersen DATE 8/16/18 8/16/18 8/17/18 OFFICIAL RECORD COPY