ML25155B827
| ML25155B827 | |
| Person / Time | |
|---|---|
| Issue date: | 09/30/2025 |
| From: | John Mckirgan NRC/NSIR/DPCP/CSB |
| To: | Mogavero R Nuclear Energy Institute |
| References | |
| NEI 08-09, Rev 7 | |
| Download: ML25155B827 (1) | |
Text
September 30, 2025 Rich Mogavero, Director Security & Incident Preparedness Nuclear Energy Institute 1201 F Street NW, Suite 1100 Washington, DC 20004
SUBJECT:
ACCEPTANCE FOR USE OF NEI 08-09, REVISION 7, CYBER SECURITY PLAN FOR NUCLEAR POWER REACTORS
Dear Mr. Mogavero:
In your letter dated April 7, 2025, you requested the U.S. Nuclear Regulatory Commission (NRC) staff to review and endorse NEI 08-09, Revision 7, Cyber Security Plan for Nuclear Power Reactors, available in the NRC Agencywide Documents Access and Management System (ADAMS) under Accession No. ML25107A191, to ensure the proposed changes meet the requirements of Title 10 of the Code of Federal Regulations (10 CFR) 73.54, Protection of Digital Computer and Communication Systems, and Networks.
The staff completed its review of NEI 08-09, Revision 7, using NRC regulations, regulatory guidance, and relevant industry guidance acceptable for use by licensees in meeting the requirements of 10 CFR 73.54. Based on this review, the staff concludes that NEI 08-09, Revision 7, is acceptable for use by licensees. The staff plans to note its acceptance of NEI 08-09, Revision 7, in the anticipated revision to Regulatory Guide 5.71 Revision 2, Cyber Security Programs for Nuclear Power Reactors.
If licensees elect to implement NEI 08-09, Revision 7, licensees are responsible to ensure that the implementation of changes to their cyber security programs do not decrease the effectiveness of their cyber security plans in accordance with the 10 CFR 50.54 review process.
For additional information, licensees may refer to NEI 11-08, Guidance on Submitting Security Plan Changes, Revision 0, dated August 2012, reviewed and approved for use by the NRC (ML12216A194).
If you have any questions regarding this matter, please contact Mr. Alexander Prada at alexander.prada@nrc.gov.
Sincerely,
/RA Shakur Walker for/
John McKirgan, Director Division of Physical and Cybersecurity Policy Office of Nuclear Security and Incident Response