|
---|
Category:Inspection Plan
MONTHYEARIR 05000263/20230052023-08-30030 August 2023 Updated Inspection Plan for Monticello Nuclear Generating Plant (Report 05000263/2023005) IR 05000263/20220062023-03-0101 March 2023 Annual Assessment Letter for Monticello Nuclear Generating Plant, Unit 1 (Report 05000263/2022006) ML23058A1522023-02-27027 February 2023 Notification of NRC Baseline Inspection and Request for Information; Inspection Report 05000263/2023002 IR 05000263/20220052022-08-29029 August 2022 Updated Inspection Plan for Monticello Nuclear Generating Plant (Report 05000263/2022005) IR 05000263/20210062022-03-0202 March 2022 Annual Assessment Letter for Monticello Nuclear Generating Plant, Unit 1 (Report 05000263/2021006) ML21322A2362021-11-18018 November 2021 Information Request for the Cyber-Security Baseline Inspection, Notification to Perform Inspection 05000263/2022401 IR 05000263/20210052021-09-0101 September 2021 Updated Inspection Plan for Monticello Nuclear Generating Plant 2 (Report 05000263/2021005) ML21215A2172021-08-0303 August 2021 Notification of an NRC Biennial Licensed Operator Requalification Program Inspection and Request for Information ML21147A5082021-06-0303 June 2021 Information Request to Support the NRC Annual Baseline Emergency Action Level and Emergency Plan Changes Inspection ML21099A0902021-04-0808 April 2021 Information Request to Support Upcoming Temporary Instruction 2515/194 Inspection; Inspection Report 05000263/2021011 ML21085A8582021-03-26026 March 2021 Request for Information for an NRC Triennial Baseline Design Bases Assurance Inspection (Team): Inspection Report 05000263/2021010 IR 05000263/20200062021-03-0404 March 2021 Annual Assessment Letter for the Monticello Nuclear Generating Plant (Report 05000263/2020006) ML21029A2982021-01-29029 January 2021 Notification of NRC Baseline Inspection and Request for Information; Inspection Report 05000263/2021002 ML20275A3942020-10-0101 October 2020 Information Request to Support Upcoming Problem Identification and Resolution (Pi&R) Inspection at the Monticello Nuclear Generating Plant IR 05000263/20200052020-09-0101 September 2020 Updated Inspection Plan for Monticello Nuclear Generating Plant (Report 05000263/2020005) ML20134H9282020-05-12012 May 2020 Notification of NRC Design Bases Assurance Inspection (Programs) and Initial Request for Information: Inspection Report 05000263/2020013 IR 05000263/20190062020-03-0303 March 2020 Annual Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2019006 and 07200058/2019006) ML19324F8512019-11-20020 November 2019 Long-Term Replacement Steam Dryer Inspection Plan ML19322C0512019-11-14014 November 2019 Notification of NRC Fire Protection Team Inspection Request for Information; Inspection Report Number 05000263/2020011 IR 05000263/20190052019-08-28028 August 2019 Updated Inspection Plan for Monticello Nuclear Generating Plant (Report 05000263/2019005) ML19136A0202019-05-15015 May 2019 Information Request to Support the NRC Annual Baseline Emergency Action Level and Emergency Plan Changes Inspection (Garza) ML19065A0832019-03-0505 March 2019 Ltr. 03/05/19 Monticello Nuclear Generating Plant - Notification of NRC Baseline Inspection and Request for Information; Inspection Report 05000263/2019002 (DRS-E.Fernandez) IR 05000263/20180062019-03-0404 March 2019 Annual Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2018006 and 07200058/2018006) IR 05000263/20180052018-08-28028 August 2018 Updated Inspection Plan for Monticello Nuclear Generating Plant (Report 05000263/2018005) IR 05000263/20170062018-03-0202 March 2018 Annual Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2017006) ML17345A8402017-12-11011 December 2017 Information Request to Support Upcoming Temporary Instruction 2515/191 Inspection at Monticello Nuclear Generating Plant IR 05000263/20170052017-08-28028 August 2017 Updated Inspection Plan for Monticello Nuclear Generating Plant (Report 05000263/2017005) ML17159A6992017-06-0808 June 2017 Information Request for the Cyber-Security Baseline Inspection, Notification to Perform Inspection 05000263/2017409 ML17094A4352017-04-0303 April 2017 Monticello - Notification of NRC Supplemental Inspection (95001) and Request for Information IR 05000263/20160062017-03-0101 March 2017 Annual Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2016006) ML17026A4302017-01-26026 January 2017 Notification of NRC Triennial Fire Protection Baseline Inspection and Request for Information 05000263/2017007 IR 05000263/20160052016-08-31031 August 2016 Mid-Cycle Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2016005) IR 05000263/20150062016-03-0202 March 2016 Annual Assessment Letter for Monticello Nuclear Generating Plant (Inspection Report 05000263/2015006) ML16041A0482016-02-0909 February 2016 Ltr. 02/09/16 Monticello Nuclear Generating Plant - Notification of an NRC Triennial Heat Sink Performance Inspection and Request for Information; Inspection Report 05000263/2016002 IR 05000263/20150052015-09-0101 September 2015 Mid-Cycle Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2015005) IR 05000263/20140012015-03-0404 March 2015 Annual Assessment Letter for the Monticello Nuclear Generating Plant, (Report 05000263/2014001) ML15027A0412015-01-26026 January 2015 ISI Request for Information ML14245A1442014-09-0202 September 2014 Mid-Cycle Assessment Letter for Monticello Nuclear Generating Plant ML14216A5132014-08-0404 August 2014 Information Request to Support Upcoming Biennial Problem Identification and Resolution Inspection at the Monticello Nuclear Generating Plant IR 05000263/20130012014-03-0404 March 2014 Annual Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2013001) ML13246A2312013-09-0303 September 2013 2013 Monticello MOC Letter Combined ML13221A5712013-08-0909 August 2013 Ltr 8/9/13 Monticello MOD 50.59 Request for Information IR 05000263/20120012013-03-0404 March 2013 Annual Assessment Letter for Monticello Nuclear Generating Plant, (Report 05000263-12-001) ML12249A4222012-09-0404 September 2012 Mid-Cycle Assessment Letter for Monticello Generating Plant IR 05000263/20110072012-03-0505 March 2012 Annual Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263/2011007) IR 05000263/20110062011-09-0101 September 2011 Mid-Cycle Performance Review and Inspection Plant for Monticello Nuclear Plant 05000263-11-006 IR 05000263/20110012011-03-0404 March 2011 Annual Assessment Letter for Monticello Nuclear Generating Plant (Report 05000263-11-001) ML1104705722011-02-16016 February 2011 Request Notification of NRC Inspection and Request for Information ISI ML1024400642010-09-0101 September 2010 Mid-Cycle Performance Review and Inspection Plan - Monticello Nuclear Generating Plant IR 05000263/20100012010-03-0303 March 2010 Monticello Nuclear Generating Plant EOC Annual Assessment Letter (Report 05000263-10-001) 2023-08-30
[Table view] Category:Letter
MONTHYEARML24025A9362024-01-31031 January 2024 Exemption from Select Requirements of 10 CFR Part 73 (EPID L-2023-LLE-0055 (Security Notifications, Reports, and Recordkeeping and Suspicious Activity Reporting)) IR 05000263/20230042024-01-31031 January 2024 Integrated Inspection Report 05000263/2023004 ML24024A0722024-01-24024 January 2024 Independent Spent Fuel Storage Installation, Onticello, Supplement to Request for Exemption from Enhanced Weapons, Firearms Background Checks, and Security Event Notifications Implementation IR 05000263/20244012024-01-22022 January 2024 Information Request for the Cyber-Security Baseline Inspection, Notification to Perform Inspection 05000263/2024401 L-MT-23-054, Subsequent License Renewal Application Supplement 82024-01-11011 January 2024 Subsequent License Renewal Application Supplement 8 L-MT-23-047, License Amendment Request: Revision to the MNGP Pressure Temperature Limits Report to Change the Neutron Fluence Methodology and Incorporate New Surveillance Capsule Data2023-12-29029 December 2023 License Amendment Request: Revision to the MNGP Pressure Temperature Limits Report to Change the Neutron Fluence Methodology and Incorporate New Surveillance Capsule Data L-MT-23-056, Subsequent License Renewal Application Response to Request for Additional Information and Request for Confirmation of Information - Set 1 Part 22023-12-18018 December 2023 Subsequent License Renewal Application Response to Request for Additional Information and Request for Confirmation of Information - Set 1 Part 2 ML23349A0572023-12-15015 December 2023 and Independent Spent Fuel Storage Installation, Revision to Correspondence Service List for Northern States Power - Minnesota IR 05000263/20234022023-12-13013 December 2023 Security Baseline Inspection Report 05000263/2023402 L-MT-23-042, 2023 Annual Report of Changes in Emergency Core Cooling System Evaluation Models Pursuant to 10 CFR 50.462023-12-11011 December 2023 2023 Annual Report of Changes in Emergency Core Cooling System Evaluation Models Pursuant to 10 CFR 50.46 L-MT-23-052, Subsequent License Renewal Application Supplement 72023-11-30030 November 2023 Subsequent License Renewal Application Supplement 7 L-MT-23-051, Update to the Technical Specification Bases2023-11-28028 November 2023 Update to the Technical Specification Bases L-MT-23-049, Subsequent License Renewal Application Response to Request for Additional Information and Request for Confirmation of Information - Set 12023-11-21021 November 2023 Subsequent License Renewal Application Response to Request for Additional Information and Request for Confirmation of Information - Set 1 ML23319A3182023-11-15015 November 2023 Request for Exemption from Enhanced Weapons, Firearms Background Checks, and Security Event Notifications Implementation IR 05000263/20230032023-11-13013 November 2023 Integrated Inspection Report 05000263/2023003 and 07200058/2023001 L-MT-23-043, 10 CFR 50.55a(z)(1) Request Regarding OMN-17, Revision 1. VR-092023-11-13013 November 2023 10 CFR 50.55a(z)(1) Request Regarding OMN-17, Revision 1. VR-09 L-MT-23-038, License Amendment Request to Revise Monticello Technical Specification Surveillance Requirement 3.8.6.62023-11-10010 November 2023 License Amendment Request to Revise Monticello Technical Specification Surveillance Requirement 3.8.6.6 L-MT-23-046, Subsequent License Renewal Application Response to Request for Additional Information Round 2 - Set 12023-11-0909 November 2023 Subsequent License Renewal Application Response to Request for Additional Information Round 2 - Set 1 ML23291A1102023-10-23023 October 2023 Environmental Audit Summary and RCIs and RAIs ML23285A3062023-10-12012 October 2023 Implementation of the Fleet Standard Emergency Plan for the Monticello Nuclear Generating Plant and the Prairie Island Nuclear Generating Plant L-MT-23-041, Subsequent License Renewal Application Response to Request for Confirmation of Information Set 22023-10-0303 October 2023 Subsequent License Renewal Application Response to Request for Confirmation of Information Set 2 L-MT-23-037, Subsequent License Renewal Application Response to Request for Additional Information Set 32023-09-22022 September 2023 Subsequent License Renewal Application Response to Request for Additional Information Set 3 ML23262B0372023-09-19019 September 2023 Response to NRC Request for Additional Information Regarding the 2023 Monticello and Prairie Island Plant Decommissioning Funding Status Reports ML23248A2092023-09-18018 September 2023 Proposed Alternative VR-11 to the Requirements of the ASME OM Code Associated with Periodic Verification Testing of MO-2397, Reactor Water Cleanup Inboard Isolation Valve ML23256A1682023-09-13013 September 2023 Independent Spent Fuel Storage Installation and Monticello Nuclear Generating Plant - Voluntary Security Clearance Program 2023 Insider Threat Program Self-Inspection IR 05000263/20230102023-09-0707 September 2023 Commercial Grade Dedication Inspection Report 05000263/2023010 L-MT-23-036, Subsequent License Renewal Application Response to Request for Additional Information Set 2 and Supplement 62023-09-0505 September 2023 Subsequent License Renewal Application Response to Request for Additional Information Set 2 and Supplement 6 ML23214A2412023-08-31031 August 2023 Letter: Aging Management Audit - Monticello Unit 1 - Subsequent License Renewal Application IR 05000263/20230052023-08-30030 August 2023 Updated Inspection Plan for Monticello Nuclear Generating Plant (Report 05000263/2023005) L-MT-23-035, Subsequent License Renewal Application Supplement 52023-08-28028 August 2023 Subsequent License Renewal Application Supplement 5 ML23241A9732023-08-21021 August 2023 Request for Scoping Comments Concerning the Environmental Review of Monticello Nuclear Generating Plant, Unit 1, Subsequent License Renewal Application (Docket No. 50-263) L-MT-23-034, Subsequent License Renewal Application Response to Request for Additional Information Set 12023-08-15015 August 2023 Subsequent License Renewal Application Response to Request for Additional Information Set 1 ML23222A0122023-08-10010 August 2023 Independent Spent Fuel Storage Installation and Monticello Nuclear Generating Plant - Changes in Foreign Ownership, Control or Influence ML23215A1312023-08-0909 August 2023 License Renewal Regulatory Audit Regarding the Environmental Review of the Subsequent License Renewal Application IR 05000263/20230022023-08-0707 August 2023 Plantintegrated Inspection Report 05000263/2023002 L-MT-23-028, 2023 Refueling Outage 90-Day Inservice Inspection (ISI) Summary Report2023-07-31031 July 2023 2023 Refueling Outage 90-Day Inservice Inspection (ISI) Summary Report L-MT-23-032, 10 CFR 50.55a(z)(2) Request Regarding MO-2397, VR-112023-07-31031 July 2023 10 CFR 50.55a(z)(2) Request Regarding MO-2397, VR-11 ML23198A0412023-07-28028 July 2023 LRA Availability Letter ML23206A2342023-07-25025 July 2023 Independent Spent Fuel Storage Installation, and Monticello Nuclear Generating Plant, Changes in Foreign Ownership, Control or Influence ML23201A0352023-07-24024 July 2023 Notification of an NRC Biennial Licensed Operator Requalification Program Inspection and Request for Information ML23202A0032023-07-21021 July 2023 Independent Spent Fuel and Independent Spent Fuel Storage Installation, Monticello Nuclear Generating Plant, Submittal of Quality Assurance Topical Report (NSPM-1) L-MT-23-031, Subsequent License Renewal Application Supplement 4 and Responses to Request for Confirmation of Information - Set 12023-07-18018 July 2023 Subsequent License Renewal Application Supplement 4 and Responses to Request for Confirmation of Information - Set 1 ML23195A1732023-07-14014 July 2023 Revision of Standard Practice Procedures Plan IR 05000263/20235012023-07-13013 July 2023 Emergency Preparedness Inspection Report 05000263/2023501 2024-01-31
[Table view] Category:Request for Additional Information (RAI)
MONTHYEARML24022A0212024-01-20020 January 2024 NRR E-mail Capture - Monticello - Request for Additional Information ISI RR-002 Alternative to Use IWB-2500(f) ML23268A0252023-09-25025 September 2023 SLRA - Requests for Confirmation of Information - Set 2 ML23248A3462023-09-0505 September 2023 NRR E-mail Capture - Request for Additional Information for Monticello Nuclear Generating Plant and Prairie Island Nuclear Generating Plant - Decommissioning Funding Status Reports ML23237A4832023-08-25025 August 2023 SLRA - Request for Additional Information - Set 3 ML23219A1072023-08-0707 August 2023 SLRA - Requests for Additional Information - Set 2 - Email from Marieliz Johnson to Shawn Hafen ML23219A1082023-08-0707 August 2023 SLRA - Requests for Additional Information - Set 2 ML23201A0352023-07-24024 July 2023 Notification of an NRC Biennial Licensed Operator Requalification Program Inspection and Request for Information ML23200A3502023-07-19019 July 2023 SLRA - Requests for Additional Information - Set 1 - Email from Marieliz Johnson to Christopher Domingos ML23200A3512023-07-19019 July 2023 SLRA - Request for Additional Information - Set 1 ML23059A3522023-03-0101 March 2023 Request for Information for NRC Commercial Grade Dedication Inspection: Inspection Report 05000263/2023010 ML23058A1522023-02-27027 February 2023 Notification of NRC Baseline Inspection and Request for Information; Inspection Report 05000263/2023002 ML23004A1982023-01-0404 January 2023 NRR E-mail Capture - Draft Request for Additional Information Monticello Nuclear Generating Plant Request Pr 08, HPCI Pump Quarterly Testing ML22206A1662022-07-25025 July 2022 Information Request to Support Upcoming Problem Identification and Resolution Inspection at Monticello Nuclear Generating Plant ML22175A1602022-06-24024 June 2022 NRR E-mail Capture - RAI Monticello Fuel Oil Storage Tank Inspection ML22181A1962022-06-24024 June 2022 NRR E-mail Capture - Draft RAI Monticello Alternative VR-08 ML22131A2652022-05-11011 May 2022 NRR E-mail Capture - Request for Additional Information Xcel Energy Amendment Request to Create a Common Eplan and EOF for Monticello and Prairie Island ML22123A2822022-05-0303 May 2022 NRR E-mail Capture - Request for Additional Information Monticello Alternative VR-10, EFCV Testing Frequency ML21322A2362021-11-18018 November 2021 Information Request for the Cyber-Security Baseline Inspection, Notification to Perform Inspection 05000263/2022401 ML21085A8582021-03-26026 March 2021 Request for Information for an NRC Triennial Baseline Design Bases Assurance Inspection (Team): Inspection Report 05000263/2021010 ML21068A2772021-03-0909 March 2021 NRR E-mail Capture - Monticello TSTF-505, Request for Additional Information ML20343A1292020-12-0808 December 2020 NRR E-mail Capture - Request for Additional Information ML20302A1972020-10-26026 October 2020 NRR E-mail Capture - Monticello Request for Additional Information TSTF-505 License Amendment Request ML20191A0252020-07-0101 July 2020 NRR E-mail Capture - Draft Request for Additional Information Monticello Alternative Request RR-016 Related to H8, H9, and H 10 Weld Examinations ML20133K0532020-05-14014 May 2020 Information Request to Support the NRC Annual Baseline Emergency Action Level and Emergency Plan Changes Inspection ML20134H9282020-05-12012 May 2020 Notification of NRC Design Bases Assurance Inspection (Programs) and Initial Request for Information: Inspection Report 05000263/2020013 ML20120A0272020-04-28028 April 2020 NRR E-mail Capture - Request for Additional Information Monticello Long Term Steam Dryer Inspection Plan ML20099F3622020-04-0606 April 2020 Lr Phase 4 Request for Information ML20055F3672020-02-24024 February 2020 Information Request to Support Upcoming Temporary Instruction 2515/193 Inspection at Monticello Nuclear Generating Plant ML20035F1552020-02-0404 February 2020 NRR E-mail Capture - Request for Additional Information Monticello and Prairie Island Alternative Requests to Adopt Code Cases N-786-3 and N-789-3 (Epids: L-2019-LLR-0078 and L-2019-LLR-0079) ML19270E8652019-09-27027 September 2019 Notification of an NRC Biennial Licensed Operator Requalification Program Inspection and Request for Information (Rbaker) ML19080A2182019-03-21021 March 2019 NRR E-mail Capture - Request for Additional Information Monticello License Amendment Request to Remove Note TS LCO 3.5.1 ML19070A1302019-03-0808 March 2019 Ltr. 03/08/19 Monticello Nuclear Generating Plant - Notification of an NRC Triennial Heat Sink Performance Inspection and Request for Information; Inspection Report 05000263/2019003 (DRS-V.Petrella) ML19031A9132019-01-31031 January 2019 NRR E-mail Capture - Request for Additional Information Monticello License Amendment Request to Adopt 10 CFR 50.69 ML18269A3572018-09-26026 September 2018 NRR E-mail Capture - Request for Additional Information Monticello License Amendment Request to Adopt TSTF-425 ML18173A0512018-06-22022 June 2018 NRR E-mail Capture - Request for Additional Information Monticello Request for Exemption from Appendix R Requirements (L-2018-LLE-0001) ML18130A7472018-05-0909 May 2018 NRR E-mail Capture - Request for Information Monticello TSTF-542 License Amendment Request ML18121A2542018-05-0101 May 2018 Enclosurequest for Additional Information (05/01/2018, E-Mail from C. Jacobs/Dsfm to S. Jurek Monticello Exemption: NRC Clarification Questions on RAI#1 Responses) ML18065A5482018-03-0606 March 2018 EnclosuRAI-1 (non-proprietary) (Letter to T. J. O'Connor First Request for Additional Information for Review of Exemption Request for Five Nonconforming Dry Shielded Canisters 11 Through 15) ML17293A0912017-10-18018 October 2017 NRR E-mail Capture - Request for Additional Information Monticello Request for Exemption from Appendix R Requirements (CAC No. MF9586; EPID L-2017-LLE-00012) ML17235B0012017-08-23023 August 2017 NRR E-mail Capture - Request for Additional Information Monticello EAL Scheme Change Amendment Request ML17221A3882017-08-0909 August 2017 NRR E-mail Capture - Request for Additional Information for Monticello Nuclear Generating Plant License Amendment Request Dated March 24, 2017 Emergency Response Organization ML17219A0752017-08-0707 August 2017 NRR E-mail Capture - Request for Additional Information for Monticello Nuclear Generating Plant License Amendment Request Dated March 24, 2017 Emergency Response Organization ML17086A0602017-03-27027 March 2017 NRR E-mail Capture - Request for Additional Information Monticello Nuclear Generating Plant Integrated Leak Rate Test Interval Extension Request ML16323A2422016-11-18018 November 2016 NRR E-mail Capture - Monticello ILRT Extension Amendment Request for Additional Information ML13336A7072013-12-0404 December 2013 Request for Additional Information Changes to Security Plan Revision 18 ML13304B4182013-11-0101 November 2013 Request for Additional Information Associated with Near-Term Task Force Recommendation 2.3, Seismic Walkdowns ML13275A1872013-10-28028 October 2013 Interim Staff Evaluation and Request for Additional Information Regarding the Overall Integrated Plan for Implementation of Order EA-12-051 ML13154A4702013-06-0404 June 2013 Rai'S Following Ifib Analysis 2013 Decommissioning Funding Status Report for Prairie Island 1 and 2 and Monticello ML12279A2952012-10-12012 October 2012 Request for Additional Information 10 CFR 50.54(p)(2) Changes to Security Plan ML12221A3362012-08-0808 August 2012 Draft RAI on Revision to Security Plan 2024-01-20
[Table view] |
See also: IR 05000263/2022401
Text
November 18, 2021
Mr. Thomas Conboy
Site Vice President
Monticello Nuclear Generating Plant
Northern States Power Company, Minnesota
2807 West County Road 75
Monticello, MN 55362-9637
SUBJECT: MONTICELLO NUCELAR GENERATING PLANT - INFORMATION REQUEST
FOR THE CYBER-SECURITY BASELINE INSPECTION, NOTIFICATION TO
PERFORM INSPECTION 05000263/2022401
Dear Mr. Conboy:
On February 14, 2022, the U.S. Nuclear Regulatory Commission (NRC) will begin a baseline
inspection in accordance with Inspection Procedure (IP) 71130.10 Cyber-Security, Revision 0
at your Monticello Nuclear Generating Station. The inspection will be performed to evaluate and
verify your ability to meet the Milestone 8 (i.e., full implementation) requirements of the NRCs
Cyber-Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73, Section 54,
Protection of Digital Computer and Communication Systems and Networks. The onsite portion
of the inspection will take place February 14-18, 2022.
Experience has shown that baseline inspections are extremely resource intensive, both for the
NRC inspectors and the licensee staff. In order to minimize the inspection impact on the site
and to ensure a productive inspection for both parties, we have enclosed a request for
documents needed for the inspection. These documents have been divided into four groups.
The first group specifies information necessary to assist the inspection team in choosing the
focus areas (i.e., sample set) to be inspected by the cyber-security IP. This information should
be made available electronically no later than December 20, 2021. The inspection team will
review this information and, by January 4, 2022, will request the specific items that should be
provided for review.
The second group of additional requested documents will assist the inspection team in the
evaluation of the critical systems and critical digital assets (CSs/CDAs), defensive architecture,
and the areas of the licensees CSP selected for the cyber-security inspection. This information
will be requested for review in the regional office prior to the inspection by February 1, 2022, as
identified above.
T. Conboy -2-
The third group of requested documents consists of those items that the inspection team will
review, or need access to, during the inspection. Please have this information available by the
first day of the onsite inspection, February 14, 2022.
The fourth group of information is necessary to aid the inspection team in tracking issues
identified as a result of the inspection. It is requested that this information be provided to the
lead inspector as the information is generated during the inspection. It is important that all of
these documents are up to date and complete in order to minimize the number of additional
documents requested during the preparation and/or the onsite portions of the inspection.
The lead inspector for this inspection is Jasmine Gilliam. We understand that our regulatory
contact for this inspection is David Feitl of your organization. If there are any questions about
the inspection or the material requested, please contact the lead inspector at 630-829-9831 or
via e-mail at Jasmine.Gilliam@nrc.gov.
This letter does not contain new or amended information collection requirements subject to the
Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection
requirements were approved by the Office of Management and Budget, Control
Number 3150-0011. The NRC may not conduct or sponsor, and a person is not required to
respond to, a request for information or an information collection requirement unless the
requesting document displays a currently valid Office of Management and Budget Control
Number.
In accordance with 10 CFR 2.390, Public Inspections, Exemptions, Requests for Withholding,
of the NRC's "Rules of Practice," a copy of this letter and its enclosure will be available
electronically for public inspection in the NRCs Public Document Room or from the Publicly
Available Records (PARS) component of the NRC's Agencywide Documents Access and
Management System (ADAMS). ADAMS is accessible from the NRC Web site at
http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).
Sincerely,
Signed by Gilliam, Jasmine
on 11/18/21
Jasmine Gilliam, Senior Reactor Inspector
Engineering Branch 3
Division of Reactor Safety
Docket No. 50-263
License No. DPR-22
Enclosure:
Monticello Cyber-Security Inspection
Document Request
cc w/encl: Distribution via LISTSERV
T. Conboy -3-
Letter to Thomas Conboy from Jasmine Gilliam dated November 18, 2021.
SUBJECT: MONTICELLO NUCELAR GENERATING PLANT - INFORMATION REQUEST
FOR THE CYBER-SECURITY BASELINE INSPECTION, NOTIFICATION TO
PERFORM INSPECTION 05000263/2022401
DISTRIBUTION:
Jessie Quichocho
Robert Williams
RidsNrrDorlLpl3
RidsNrrPMMonticello
RidsNrrDroIrib Resource
John Giessner
Mohammed Shuaibi
Jamnes Cameron
Shelbie Lewman
Allan Barker
DRPIII
DRSIII
ADAMS Accession Number: ML21322A236
Publicly Available Non-Publicly Available Sensitive Non-Sensitive
OFFICE RIII
NAME JGilliam:mb
DATE 11/18/2021
OFFICIAL RECORD COPY
MONTICELLO CYBER-SECURITY INSPECTION DOCUMENT REQUEST
Inspection Report: 05000263/2022401
Inspection Dates: February 14-18, 2022
Inspection Procedure: IP 71130.10, Cyber-Security, Revision 0
NRC Inspectors: Jasmine Gilliam, Lead Alan Dahbur
630-829-9831 630-829-9810
Jasmine.Gilliam@nrc.gov Alan.Dahbur@nrc.gov
NRC Contractors: Alexander Prada Casey Priester
Alexander.Prada@nrc.gov Frederick.Priester@nrc.gov
I. Information Requested for In-Office Preparation
The initial request for information (i.e., first RFI) concentrates on providing the inspection
team with the general information necessary to select appropriate components and
CSP elements to develop a site-specific inspection plan. The first RFI is used to identify
the list of critical systems and critical digital assets (CSs/CDAs) plus operational and
management (O&M) security control portions of the CSP to be chosen as the sample
set required to be inspected by the cyber-security IP. The first RFIs requested
information is specified below in Table RFI #1. The Table RFI #1 information is
requested to be provided to the regional office by December 20, 2021, or sooner, to
facilitate the selection of the specific items that will be reviewed during the onsite
inspection weeks.
The inspection team will examine the returned documentation from the first RFI and
identify/select specific systems and equipment (e.g., CSs/CDAs) to provide a more
focused follow-up request to develop the second RFI. The inspection team will submit
the specific systems and equipment list to your staff by January 4, 2022, which will
identify the specific systems and equipment that will be utilized to evaluate the
CSs/CDAs, defensive architecture, and the areas of the licensees CSP selected for the
cyber-security inspection. We request that the additional information provided from the
second RFI be made available to the regional office prior to the inspection by
February 1, 2022.
The required Table RFI 1 information shall be provided electronically to the lead
inspector by December 20, 2021. If a compact disk (CD) is provided, please provide
four copies (one for each inspector/contactor). The preferred file format for all lists is a
searchable Excel spreadsheet file. These files should be indexed and hyper-linked to
facilitate ease of use. If you have any questions regarding this information, please call
the inspection team leader as soon as possible.
Enclosure
MONTICELLO CYBER-SECURITY INSPECTION DOCUMENT REQUEST
Table RFI #1
Request: IP Ref
A list of all Identified Critical Systems and Critical Digital Assets -
highlight/note any additions, deletions, reclassifications due to new
1 Overall
guidance from white papers, changes to NEI 10-04, 13-10, etc.,
since the last cyber security inspection.
A list of EP and Security onsite and offsite digital communication
2 Overall
systems
Network Topology Diagrams to include information and data flow for
3 Overall
critical systems in levels 2, 3 and 4 (If available)
4 Ongoing Monitoring and Assessment program documentation 03.01(a)
The most recent effectiveness analysis of the Cyber Security
5 03.01(b)
Program
Vulnerability screening/assessment and scan program
6 03.01(c)
documentation
Cyber Security Incident response documentation, including incident
detection, response, and recovery documentation as well as 03.02(a)
7 contingency plan development, implementation and including any and
program documentation that requires testing of security boundary 03.04(b)
device functionality
8 Device Access and Key Control documentation 03.02(c)
9 Password/Authenticator documentation 03.02(c)
10 User Account/Credential documentation 03.02(d)
Portable Media and Mobile Device control documentation, including
11 03.02(e)
kiosk security control assessment/documentation
Design change/ modification program documentation and a List of all
design changes completed since the last cyber security inspection,
12 03.03(a)
including either a summary of the design change or the 50.59
documentation for the change
03.03(a),
Supply Chain Management documentation including any security
13 impact analysis for new acquisitions (b) and
(c)
Configuration Management documentation including any security
03.03(a)
14 impact analysis performed due to configuration changes since the and (b)
last inspection
2
MONTICELLO CYBER-SECURITY INSPECTION DOCUMENT REQUEST
Table RFI #1
Request: IP Ref
Cyber Security Plan and any 50.54(p) analysis to support changes to
15 the plan since the last inspection 03.04(a)
16 Cyber Security Metrics tracked (if applicable) 03.06 (b)
Provide documentation describing any cyber security changes to the
17 access authorization program since the last cyber security Overall
inspection.
Provide a list of all procedures and policies provided to the NRC with
18 their descriptive name and associated number (if available). Overall
19 Performance testing report (if applicable). 03.06 (a)
In addition to the above information please provide the following:
(1) Electronic copy of the UFSAR and technical specifications;
(2) Name(s) and phone numbers for the regulatory and technical contacts; and
(3) Current management and engineering organizational charts.
Based on this information, the inspection team will identify and select specific systems
and equipment (e.g., CSs/CDAs) from the information requested by Table RFI #1 and
submit a list of specific systems and equipment to your staff by January 4, 2021, for the
second RFI (i.e., RFI #2).
II. Additional Information Requested to Be Available Prior to Inspection
As stated in Section I above, the inspection team will examine the returned
documentation requested from Table RFI #1 and submit the list of specific systems and
equipment to your staff by January 4, 2022, for the second RFI (i.e., RFI #2). The
second RFI will request additional information required to evaluate the CSs/CDAs,
defensive architecture, and the areas of the licensees CSP selected for the
cyber-security inspection. The additional information requested for the specific systems
and equipment is identified in Table RFI #2.
The Table RFI 2 information shall be provided electronically to the lead inspector by
February 1, 2022. If a compact disk (CD) is provided, please provide four copies (one
for each inspector/contactor). The preferred file format for all lists is a searchable Excel
spreadsheet file. These files should be indexed and hyper-linked to facilitate ease of
use. If you have any questions regarding this information, please call the inspection
team leader as soon as possible. If you have any questions regarding this information,
please call the inspection team leader as soon as possible.
3
MONTICELLO CYBER-SECURITY INSPECTION DOCUMENT REQUEST
Table RFI #2
Request Items
For the system(s) chosen for inspection provide:
Ongoing Monitoring and Assessment activity performed on the
1 03.01(a)
system(s)
2 All Security Control Assessments for the selected system(s) 03.01(a)
All vulnerability screenings/assessments associated with or scans
3 performed on the selected system(s) since the last cyber security 03.01(c)
inspection
Documentation (including configuration files and rules sets) for
Network-based Intrusion Detection/Protection Systems (NIDS/NIPS),
4 Host-based Intrusion Detection Systems (HIDS), and Security 03.02(b)
Information and Event Management (SIEM) systems for system(s)
chosen for inspection)
Documentation (including configuration files and rule sets) for
5 intra-security level firewalls and boundary devices used to protect 03.02(c)
the selected system(s)
Copies of all periodic reviews of the access authorization list for the
6 selected systems since the last inspection 03.02(d)
7 Baseline configuration data sheets for the selected CDAs 03.03(a)
Documentation on any changes, including Security Impact Analyses,
8 performed on the selected system(s) since the last inspection 03.03(b)
Copies of the purchase order documentation for any new equipment
9 purchased for the selected systems since the last inspection 03.03(c)
Copies of any cyber security drills performed since the last 03.02(a)
10 inspection, along with any reports or assessments generated
03.04(b)
Copy of the individual recovery plan(s) for the selected system(s) 03.02(a)
11 including documentation of the results the last time the backups
were executed 03.04(b)
Corrective actions taken as a result of cyber security incidents/issues
12 to include previous NRC violations and Licensee Identified Violations 03.04(d)
since the last cyber security inspection
4
MONTICELLO CYBER-SECURITY INSPECTION DOCUMENT REQUEST
III. Information Requested to Be Available on First Day of Inspection
For the specific systems and equipment identified in Section II above, provide the
following RFI (i.e., Table 1ST Week Onsite) electronically by February 14, 2022, the first
day of the inspection.
Table 1ST Week Onsite
Request: Items
Any cyber security event reports submitted in accordance with
1 03.04(a)
10 CFR 73.77 since the last cyber security inspection
Updated Copies of corrective actions taken as a result of cyber
security incidents/issues, to include previous NRC violations and
2 Licensee Identified Violations since the last cyber security 03.04(d)
inspection, as well as vulnerability-related corrective actions
In addition to the above information please provide the following:
(1) Copies of the following documents do not need to be solely available to the
inspection team as long as the inspectors have easy and unrestrained access to
them.
a. Updated Final Safety Analysis Report, if not previously provided;
b. Original FSAR Volumes;
c. Original SER and Supplements;
d. FSAR Question and Answers;
e. Quality Assurance Plan;
f. Technical Specifications, if not previously provided; and
g. Latest IPE/PRA Report.
(2) Vendor Manuals, Assessment and Corrective Actions:
a. The most recent Cyber-Security Quality Assurance (QA) audit and/or
self-assessment; and
b. Corrective action documents (e.g., condition reports, including status of
corrective actions) generate as a result of the most recent Cyber-Security Quality
Assurance (QA) audit and/or self-assessment.
5
MONTICELLO CYBER-SECURITY INSPECTION DOCUMENT REQUEST
IV. Information Requested to Be Provided Throughout the Inspection
(1) Copies of any corrective action documents generated as a result of the inspection
teams questions or queries during the inspection.
(2) Copies of the list of questions submitted by the inspection team members and the
status/resolution of the information requested (provided daily during the inspection to
each inspection team member).
If you have any questions regarding the information requested, please contact the inspection
team leader.
6