ML19086A043
| ML19086A043 | |
| Person / Time | |
|---|---|
| Issue date: | 03/07/2019 |
| From: | Eric Lee NRC/NSIR/DPCP/CSB |
| To: | |
| Lee E | |
| References | |
| Download: ML19086A043 (6) | |
Text
Eric Lee NSIR/DPCP/CSB eric.lee@nrc.gov ML19086A043 3/7/19 1
- December 14, 2018: NEI submitted Addendum 7 to NEI 08-09, Evaluating and Documenting Use of Alternative Cyber Security Controls/Countermeasures, Revision 6, for the U.S. Nuclear Regulatory Commissions (NRC) review and endorsement.
- Submitted Addendum 7 to enhance clarity and consistency in implementing alternative security controls and what controls need to be implemented.
2
The proposed addendum does not constitute a decrease in the effectiveness of CSPs.
Maintain the intent and objectives of the cyber security plans and remain consistent with cyber security plans.
Reference the documents that have regulatory authorities.
Technically correct.
3
The clarification and guidance provided in the proposed guidance document should be applicable to those security controls that do not have clear direction on how or when alternative security controls can be used to address the required security controls.
Delete any references to inspection procedures or the significant determination process.
4
Revise the defense in depth discussion included in the addendum to be consistent with the cyber security plan.
Revise the alternative justifications to be consistent with Addendum 1 to NEI 08-09 Revision 6.
Revise the not applicable security controls discussion to focus on explaining why particular security controls are not applicable.
5
6