RA-10-090, Submittal of Exelon Cyber Security Plan

Submittal of Exelon Cyber Security Plan

ML103230042
Person / Time
Site:	Dresden, Peach Bottom, Oyster Creek, Byron, Three Mile Island, Braidwood, Limerick, Clinton, Quad Cities, LaSalle
Issue date:	11/18/2010
From:	Cowan B Exelon Generation Co, Exelon Nuclear
To:	Document Control Desk, Office of Nuclear Reactor Regulation, Office of Nuclear Security and Incident Response
References
RA-10-090, RS-10-198, TMI-10-116
Download: ML103230042 (3)

Text

Exelon Nuclear www.exeloncorp.com WWW 0 00 ( 1 J 1 1 1)111 Exeln oo Exolon W1y N uci ear fo-nlnI t SIu51re PA 1qz 10CFR5O.90 10 CFR 50.90 TMI-10-116 TMI-10-1 16 RA-10-090 RA-1 0-090 RS-10-198 RS-1 0-198 November November 18, 18, 2010 2010 U.S. Nuclear Regulatory Commission Attn: Document Control Control Desk Desk Washington, D.C. 20555-0001 Braidwood Station, Units Braidwood Units 11 and 22 Facility Operating License Nos. NPF-72 and NPF-77 Nos. NPF-72 NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 50-457 Byron Station, Units 11 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 1 Facility Operating License No. NPF-62 NRC Docket No. 50-461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 11 and2 LaSalle and 2 Facility Operating License Nos. NPF-11 NPF-1 8 NPF-1 1 and NPF-18 NRC Docket NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 11 and 2 Limerick Generating Facility Facility Operating Operating License Nos. Nos. NPF-39 and NPF-85 NRC NRC Docket Docket Nos. 50-352 and Nos. 50-352 and 50-353 Oyster Oyster Creek Creek Nuclear Generating Station Nuclear Generating Station Renewed Facility Renewed Facility Operating Operating License License No. DPR-16 No. DPR-16 NRC NRC Docket Docket No.No. 50-219 50-219 Peach Peach Bottom Power Station, Atomic Power Bottom Atomic Station, Units and 33 Units 22 and Renewed Operating License Facility Operating Renewed Facility License Nos. DPR-44 and Nos. DPR-44 DPR-56 and DPR-56 NRC Docket NRC 50-277 and Nos. 50-277 Docket Nos. and 50-27850-278 Quad Quad Cities Nuclear Power Cities Nuclear Station, Units Power Station, and 22 Units 11 and Renewed Operating License Facility Operating Renewed Facility License Nos. DPR-29 Nos. DPR-29 and DPR-30 and DPR-30 NRC Docket NRC 50-254 and Nos. 50-254 Docket Nos. 50-265 and 50-265 Three Mile Three Island Nuclear Mile Island Station, Unit Nuclear Station, Unit 11 Facility Operating Renewed Facility Operating License No.

Renewed License DPR-50 No. DPR-50 Docket No.

NRC Docket NRC 50-289 No. 50-289

U.S. Nuclear Regulatory Commission Exelon Cyber Security Plan November 18, 2010 Page 2

Subject:

Exelon Cyber Security Plan

Reference:

(1) Letter from Pamela B. Cowan to the USNRC Document Control Desk, Document Control Desk, Re-submittal of the Exelon Cyber Security Plan, dated dated July 23, 23, 2010 2010 (2) Letters from Michael Moon (NERC) to Exelon Nuclear Power Stations (Braidwood Station, Units 11 and 2; Byron Station, Units 11 and 2; 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units Units 22 and 3; LaSalle County Station, Units 1 1 and 2; Limerick Generating Station, Units 11 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units Units 11 and 2; and Three Mile Island Nuclear Station, Unit 1), "NERC's Response 1), NERCs Survey," dated August 27, 2010 to the Completed Bright Line Survey, (3) Letter from Pamela B. Cowan to the USNRC Document Control Desk, Notification Letter Designating Exelon Station Balance of Plant Systems within the Cyber Security Rule Scope, dated September 24, 2010 (4) Letter from Jim Hughes (NERC) to Exelon (Alison MacKellar), Update on 706-B Bright Line, dated November 8, 2010 In Reference 1, Exelon Generation Company, LLC (Exelon) submitted requests for amendments to the Facility Operating Licenses (FOL) for the above listed facilities. The proposed amendments request NRC approval of the Exelon Cyber Security Plan, revisions to the existing FOL Physical Protection license condition, and the Cyber Security Plan Implementation Schedule.

In Reference 2, the North American Electric Reliability Corporation (NERC) required Exelon to In "provide provide the NRC with a notification letter identifying all Balance of Plant (BOP) Structures, Systems, and Components (SSCs) considered important to safety" safety within thirty (30) days with a copy to NERC. In Reference 2, NERC also required Exelon to submit a revised cyber security plan for NRC review and approval, but without a specified time frame. Exelon provided the plan thirty (30) day thirty response to the NRC, as required by NERC, via Reference 3. Also in Reference day response 3, Exelon stated an intent to amend the Exelon Cyber Security Plan by November 30, 2010, to 3, Exelon BOP SSCs include BOP include SSCs within the scope of the cyber security program.

Reference 4, NERC provided additional guidance regarding submittal of the Cyber Security In Reference In Plan supplement. The letter stated:

Plan In the In the near future, Commissions decision regarding future, the NRC staff will articulate their Commission's of the jurisdiction of jurisdiction the continuity of power, balance of plant systems, structures and continuity of components. As a result, with respect to the requirement to submit "a components. a revised cyber plan.

security plan... ",

security . . , NERC expects expects each licensee to provide its updated cyber security plan in accordance in accordance with a schedule to be provided by the NRC.

u.s. Nuclear U.S. Nuclear Regulatory Regulatory Commission Commission Exelon Cyber Security Exelon Cyber Security Plan Plan November 18, November 18, 2010 2010 Page 33 Page Based on Based on the the recent recent information information and and clarification clarification from NERC, Exelon from NERC, the proposed deferring the Exelon isis deferring proposed supplement to the Cyber supplement to the Cyber Security PlanSecurity Plan (Reference (Reference 1)

1) until until after after the the NRCs NRC's decision decision on on BOP BOP SSCs jurisdiction is finalized and further direction SSCs jurisdiction is finalized and further direction is provided is provided by by the the NRC NRC staff.

staff.

This letter This letter contains contains no no new new regulatory regulatory commitment commitments. s.

IfIf you you have have anyany questions questions regarding regarding this this letter, letter, please please contact Walker at Doug Walker contact Doug (610) 765-5952.

at (610) 765-5952.

cn~q Re,pectfully, Pamela B. Cowan Pamela B.Cowan Director Director - Licensing and Regulatory Affairs Exelon Exelon Generation Generation Company, LLC cc:

cc: USNRC Region I, Regional Administrato Administratorr USNRC Region III, Administratorr Ill, Regional Administrato NRC Project Manager, NRR - Braidwood Station NRC Project Manager, NRR - Byron Station NRC Project Manager, NRR - Clinton Power Station NRC Project Manager, NRR - Dresden Nuclear Power Station NRC Project Manager, NRR - LaSalle County Station NRC NRC Project Manager, NRR - Limerick Generating Station NRC NRC Project Manager, NRR - Oyster Creek Nuclear Generating Station NRC NRC Project Project Manager, Manager, NRR - Peach Bottom Atomic Power Station NRC NRC Project Project Manager, Manager, NRR NRR - Quad Cities Nuclear Power Station NRC NRC Project Project Manager, Manager, NRR NRR -Three Mile Island Nuclear Station USNRC USNRC SeniorSenior Resident Resident Inspector Braidwood Station Inspector - Braidwood USNRC USNRC SeniorSenior Resident Resident Inspector Inspector - Byron Station USNRC USNRC SeniorSenior Resident Resident Inspector Inspector - Clinton Power Station USNRC USNRC Senior Resident Inspector - Dresden Senior Resident Inspector - Dresden Nuclear Power Station Nuclear Power USNRC USNRC Senior Senior Resident Resident Inspector - LaSalle Inspector - LaSalle County Station USNRC USNRC Senior Senior Resident Inspector - Limerick Resident Inspector - Generating Station Limerick Generating USNRC USNRC SeniorSenior Resident Resident Inspector Inspector - Oyster

- Creek Nuclear Oyster Creek Generating Station Nuclear Generating USNRC USNRC SeniorSenior Resident Resident Inspector Inspector - Peach

- Atomic Power Bottom Atomic Peach Bottom Station Power Station USNRC USNRC SeniorSenior Resident Inspector - Quad Resident Inspector - Nuclear Power Cities Nuclear Quad Cities Station Power Station USNRC USNRC SeniorSenior Resident Inspector -Three Resident Inspector Island Nuclear Mile Island

-Three Mile Station Nuclear Station S.

S. T.

T. Gray, Gray, State State of Maryland of Maryland Illinois Illinois Emergency Emergency Management Management Agency - Division of Agency - Division of Nuclear Safety Nuclear Safety R.

R. R.

R. Janati Janati - Bureau

- Bureau of of Radiation Commonwea of Protection, Commonwealth Radiation Protection, lth of Pennsylvania Pennsylvania