TMI-11-090, Supplement to Exelon Cyber Security Plan
| ML111400072 | |
| Person / Time | |
|---|---|
| Site: | Dresden, Peach Bottom, Oyster Creek, Byron, Braidwood, Limerick, Clinton, Quad Cities, LaSalle, Crane |
| Issue date: | 05/19/2011 |
| From: | Jesse M Exelon Generation Co, Exelon Nuclear |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| Shared Package | |
| ML11140071 | List: |
| References | |
| ra-11-030, rs-11-083, TMI-11-090 | |
| Download: ML111400072 (3) | |
Text
Exekin Nuclear
[RITY..RELATED INFORMATION
- WITHHOLD UNDER 10 CFR 2390 10 CFR 5090 TMI-1 1-090 RA-i 1-030 AS-i 1-083 May 19, 2011 U.S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 Facility Operating License No. NPF-62 NRC Docket No. 50-461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 and 2 Facility Operating License Nos. NPF-i 1 and NPF-1 8 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 1 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 Enclosures 1 and 2 transmitted herewith contain Security-Related Information.
When separated from Enclosures, this document is decontrolled.
SECURITY-RELATED INFORMATION - WITHHOLD UNDER 10 CFR 2.390 10 CFR 50.90 TMI-11-090 RA-11-030 RS-11-083 May 19, 2011 U.S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 Facility Operating License No. NPF-62 NRC Docket No. 50-461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 and 2 Facility Operating License Nos. NPF-11 and NPF-18 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 1 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 Enclosures 1 and 2 transmitted herewith contain Security-Related Information.
When separated from Enclosures, this document is decontrolled.
U.S. Nuclear Regulatory Commission May 19, 2011 Page 2 Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 NRC Docket Nos. 50-277 and 50-278 Quad Cities Nuclear Power Station, Units 1 and 2 Renewed Facihty Operating License Nos DPR-29 and DPR 30 NRC Docket Nos. 50-254 and 50-265 Three Mile Island Nuclear Station, Unit 1 Renewed Facility Operating License No DPR-50 NRC Docket No. 50-289
Subject:
Supplement to Exelon Cyber Security Plan
Reference:
(1)
Letter from Pamela B. Cowan to the USNRC Document Control Desk, Request for Approval of the Exelon Cyber Security Plan, dated November 23, 2009 (2)
Letter from Pamela B. Cowan to the USNRC Document Control Desk, Re-submittal of the Exelon Cyber Security Plan, dated July 23, 2010 (3)
Letter from Eva A. Brown, (U.S. Nuclear Regulatory Commission) to Mr.
Michael J. Pacilio (Exelon Nuclear), Request For Additional Information Regarding Approval of Cyber Security Plan, dated March 4, 2011 (4)
Letter from Darin M. Benyak to the USNRC Document Control Desk, Response to Request for Additional Information regarding Exelon Cyber Security Plan, dated March 31, 2011 On November 23, 2009, in accordance with the provisions of 10 CFR 50.4 and 10 CFR 50.90, Exelon Generation Company, LLC (Exelon) submitted a request for an amendment to the Facility Operating Licenses (FOL) for the above listed facilities. This proposed amendment requested U.S. Nuclear Regulatory Commission (NRC) approval of the Exelon Cyber Security Plan, provided an Implementation Schedule for the Exelon Cyber Security Program, and added to the existing FOL Physical Protection license condition to require Exelon to fully implement and maintain in effect all provisions of the Commission-approved Cyber Security Plan. By letter dated July 23, 2010 (Reference 2), Exelon supplemented the Cyber Security Plan License Amendment Request with a revised Cyber Security Plan based on the template contained in NEI 08-09, Revision 6.
By letter to Exelon dated March 4, 2011 (Reference 3), the NRC issued a Request for Additional Information (RAI) regarding the submitted Exelon Cyber Security Plan. The RAt questions dealt with three generic industry issues, including one issue involving cyber security records retention.
Exelon responded to the RAIs consistent with the industry guidance (Reference 4); however, one additional sentence was added by Exelon to help clarify the meaning of a superseded record. During a telephone call with Exelon, D. Walker, on May 11, 2011, NRC Project Manager, E. Brown, questioned whether the added sentence could be interpreted too broadly.
As a result of this conversation, Exelon is providing a revised response to the previously submitted records retention RAI question as Enclosure 1 which deletes the clarifying sentence.
U.S. Nuclear Regulatory Commission May 19, 2011 2
Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 Quad Cities Nuclear Power Station, Units 1 and 2 Renewed Facility Operating License Nos. DPR-29 and DPR-30 NRC Docket Nos. 50-254 and 50-265 Three Mile Island Nuclear Station, Unit 1 Renewed Facility Operating License No. DPR-50 NRC Docket No. 50-289
Subject:
Supplement to Exelon Cyber Security Plan
Reference:
(1)
Letter from Pamela B. Cowan to the USNRC Document Control Desk, "Request for Approval of the Exelon Cyber Security Plan," dated November 23, 2009 (2)
Letter from Pamela B. Cowan to the USNRC Document Control Desk, "Re-submittal of the Exelon Cyber Security Plan," dated July 23, 2010 (3)
Letter from Eva A. Brown, (U.S. Nuclear Regulatory Commission) to Mr.
Michael J. Pacilio (Exelon Nuclear), IIRequest For Additional Information Regarding Approval of Cyber Security Plan,1I dated March 4,2011 (4)
Letter from Darin M. Benyak to the USNRC Document Control Desk, "Response to Request for Additional Information regarding Exelon Cyber Security Plan," dated March 31,2011 On November 23, 2009, in accordance with the provisions of 10 CFR 50.4 and 10 CFR 50.90, Exelon Generation Company, LLC (Exelon) submitted a request for an amendment to the Facility Operating Licenses (FOL) for the above listed facilities. This proposed amendment requested U.S. Nuclear Regulatory Commission (NRC) approval of the Exelon Cyber Security Plan, provided an Implementation Schedule for the Exelon Cyber Security Program, and added to the existing FOL Physical Protection license condition to require Exelon to fully implement and maintain in effect all provisions of the Commission-approved Cyber Security Plan. By letter dated July 23, 2010 (Reference 2), Exelon supplemented the Cyber Security Plan License Amendment Request with a revised Cyber Security Plan based on the template contained in NEI 08-09, Revision 6.
By letter to Exelon dated March 4, 2011 (Reference 3), the NRC issued a Request for Additional Information (RAI) regarding the submitted Exelon Cyber Security Plan. The RAI questions dealt with three generic industry issues, including one issue involving cyber security records retention.
Exelon responded to the RAls consistent with the industry guidance (Reference 4); however, one additional sentence was added by Exelon to help clarify the meaning of a superseded record. During a telephone call with Exelon, D. Walker, on May 11, 2011, NRC Project Manager, E. Brown, questioned whether the added sentence could be interpreted too broadly.
As a result of this conversation, Exelon is providing a revised response to the previously submitted records retention RAI question as Enclosure 1 which deletes the clarifying sentence.
U.S. Nuclear Regulatory Commission May 19, 2011 Page 3 provides a revised Cyber Security Plan that includes the amended text as part of Section 4.13. Exelon requests that Enclosures 1 and 2, which contain security-related information, be withheld from public disclosure in accordance with 10 CFR 2.390.
There is no adverse impact to the submitted No Significant Hazards Consideration Determination. There are no additional Regulatory Commitments contained within this letter.
In accordance with 10 CFR 50.91, a copy of this letter is being provided to the designated State Officials.
If you have any questions or require additional information, please contact Mr. Doug Walker at (610) 765-5952.
I declare under penalty of perjury that the foregoing is true and correct. Executed on the l9 day of May2011.
Respectfully, Michael Jess Director
- Lice g and Regulatory Affairs Exelon Generation Company, LLC cc:
USNRC Region I, Regional Administrator USNRC Region III, Regional Administrator NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR NRC Project Manager, NRR
- Three Senior Resident Senior Resident Senior Resident Inspector Inspector Inspector Senior Resident Inspector Senior Resident Inspector Senior Resident Inspector Senior Resident Inspector Senior Resident Inspector Senior Resident Inspector Senior Resident Inspector S. T. Gray, State of Maryland Braidwood Station Byron Station Clinton Power Station Dresden Nuclear Power Station LaSalle County Station Limerick Generating Station Oyster Creek Nuclear Generating Station Peach Bottom Atomic Power Station Quad Cities Nuclear Power Station Mile Island Nuclear Station Braidwood Station Byron Station Clinton Power Station Dresden Nuclear Power Station LaSalle County Station Limerick Generating Station Oyster Creek Nuclear Generating Station Peach Bottom Atomic Power Station Quad Cities Nuclear Power Station Three Mile Island Nuclear Station
- Exelon Revised Response to the Cyber Security Plan Request for Additional Information (Records Retention)
Cyber Security Plan For Exelon Nuclear USNRC USNRC USNRC USNRC USNRC USNRC USNRC USNRC USNRC USNRC Illinois Emergency Management Agency
- Division of Nuclear Safety R. R. Janati
- Bureau of Radiation Protection, Commonwealth of Pennsylvania U.S. Nuclear Regulatory Commission May 19, 2011 Page 3 provides a revised Cyber Security Plan that includes the amended text as part of Section 4.1 Exelon requests that Enclosures 1 and which contain security-related information, be withheld from public disclosure in with 10 CFR 2.390.
There is no adverse impact to the submitted No Significant Hazards Consideration Determination. There are no additional Regulatory Commitments contained within this letter.
In accordance with 10 CFR 50.91, a copy of this letter is being provided to the designated State Officials. If you have any questions or require additional information, please contact Mr. Doug Walker at (610) 765-5952.
I declare under penalty of perjury that the foregoing is true and correct. Executed on the 19th day of May 2011.
Michael Jess Director - Lice
. g and Regulatory Affairs Exelon Generation Company, LLC - Exelon Revised Response to the Cyber Security Plan Request for Additional Information (Records Retention) - Cyber Security Plan For Exelon Nuclear cc:
USNRC Region I, Regional Administrator USNRC Region III, Regional Administrator NRC Project Manager, NRR - Braidwood Station NRC Project Manager, NRR - Byron Station NRC Project Manager, NRR - Clinton Power Station NRC Project Manager, NRR - Dresden Nuclear Power Station NRC Project Manager, NRR - LaSalle County Station NRC Project Manager, NRR - Limerick Generating Station NRC Project Manager, NRR - Oyster Creek Nuclear Generating Station NRC Project Manager, NRR - Peach Bottom Atomic Power Station NRC Project Manager, NRR - Quad Cities Nuclear Power Station NRC Project Manager, NRR - Three Mile Island Nuclear Station USNRC Senior Resident Inspector - Braidwood Station USNRC Senior Resident Inspector - Byron Station USNRC Senior Resident Inspector - Clinton Power Station USNRC Senior Resident Inspector - Dresden Nuclear Power Station USNRC Senior Resident Inspector - LaSalle County Station USNRC Senior Resident Inspector - Limerick Generating Station USNRC Senior Resident Inspector - Oyster Creek Nuclear Generating Station USNRC Senior Resident Inspector - Peach Bottom Atomic Power Station USNRC Senior Resident Inspector - Quad Cities Nuclear Power Station USNRC Senior Resident Inspector - Three Mile Island Nuclear Station S. T. Gray, State of Maryland Illinois Emergency Management Agency - Division of Nuclear Safety R. R. Janati - Bureau of Radiation Protection, Commonwealth of Pennsylvania