ML25174A219
| ML25174A219 | |
| Person / Time | |
|---|---|
| Issue date: | 06/24/2025 |
| From: | Alexander Prada NRC/NSIR/DPCP/CSB |
| To: | Mario Fernandez Office of Nuclear Security and Incident Response |
| References | |
| Download: ML25174A219 (1) | |
Text
MEMORANDUM TO:
Mario Fernandez, Chief Cyber Security Branch Division of Physical and Cyber Security Policy Office of Nuclear Security and Incident Response FROM:
Alexander Prada, IT Specialist (Cyber)
Cyber Security Branch Division of Physical and Cyber Security Policy Office of Nuclear Security and Incident Response
SUBJECT:
SUMMARY
OF FEBRUARY 25, 2025, PUBLIC MEETING TO DISCUSS THE DETAILS OF NRCS PROGRESS FOR NEI 08-09 REVISION 7 On February 25, 2025, the U.S. Nuclear Regulatory Commission (NRC) held a public meeting to provide feedback related to the proposed changes and provide status update of the ongoing review of NEI 08-09, Cyber Security Plan for Nuclear Power Reactors, Revision 7 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML24060A270). The meeting notice is available in (ML25042A456). Approximately 70 participants, including NRC staff, industry representatives, and members of the public attended the meeting. This meeting is a part of ongoing efforts to update NEI guidance to further clarify requirements, and to incorporate lessons learned and guidance submitted via white papers that have been previously reviewed and approved by the NRC. This is the second and final public meeting to discuss the status of the review and outstanding issues with NEI concerning this document.
The meeting was conducted in a hybrid format to allow maximum participation from licensees, NEI, and the public. The meeting began with formal introductions and remarks from the NRC and NEI. Following the remarks, the NRC explained the purpose of the meeting and proceeded with the presentation and discussion of the NRC review team composition, NRC feedback on the second half of NEI 08-09 Revision 7 (Addendums 2, 3, 4, 5 and 6), and NRCs progress and estimated time of completion. In addition, the NRC reviewed any outstanding items that still needed to be addressed for the first portion of the review (Appendices A, B, D, and E).
From the first half of the review the NRC identified 12 changes that needed more clarification or were not consistent with Regulatory Guide 5.71, Cyber Security Programs for Nuclear Power Reactors, Revision 1 (ML22258A204) or with10 CFR 73.54, Protection of Digital Computers and Communication Systems, and Networks. During the second meeting, only 10 of these issues were brought forward and were dispositioned where NEI and NRC reached consensus.
For the second half of the review, the NRC identified 24 changes or additions that needed to be June 24, 2025 Signed by Prada, Alexan on 06/24/25
M. Fernandez discussed prior to an acceptance for use. During the public meeting, NEI agreed to continue working on these items to ensure the revised guidance is consistent with RG 5.71 and 10 CFR 73.54.
Finally, the NRC mentioned that the estimated submission date to the Office of General Counsel (OGC) is in June 2025. The timeline for completion to include OGC review is estimated for July 2025. The NRC committed to notify NEI of any schedule changes. After this last comment, the meeting was adjourned.
CONTACT:
Alexander Prada, NSIR/DPCP 301-415-0875
ML25174A219 OFFICE NSIR/DPCP/CSB NSIR/DPCP/CSB NSIR/DPCP/CSB NAME APrada MFernandez APrada DATE Jun 24, 2025 Jun 25, 2025 Jun 25, 2025