WO 14-0033, Operating Corporation - Redacted Version of License Amendment Request (LAR) for Revision to Cyber Security Plan Implementation Schedule Completion Date

Operating Corporation - Redacted Version of License Amendment Request (LAR) for Revision to Cyber Security Plan Implementation Schedule Completion Date

ML14097A088
Person / Time
Site:	Wolf Creek
Issue date:	03/31/2014
From:	Rich Smith Wolf Creek
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
WO 14-0033
Download: ML14097A088 (20)

Text

W.SLF CREEK 'NUCLEAR OPERAFING CORPORATION March 31, 2014 Russell A. Smith Site Vice President and Chief Nuclear Operating Officer WO 14-0033 U. S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555

References:

1) Letter WO 14-0001, dated January 23, 2014, from R. A. Smith, WCNOC, to USNRC

Subject:

Docket No. 50-482: Redacted Version of License Amendment Request (LAR) for Revision to Cyber Security Plan Implementation Schedule Completion Date Gentlemen:

Reference 1 provided the Wolf Creek Nuclear Operating Corporation (WCNOC) application to amend the Renewed Facility Operating License No. NPF-42 for the Wolf Creek Generating Station (WCGS). This amendment request proposed a change to the Cyber Security Plan for Wolf Creek Nuclear Operating Corporation, Wolf Creek Generating Station (hereafter referred to as Cyber Security Plan) Implementation Milestone #8 completion date. With this submittal, WCNOC provides a redacted version of the license amendment request which does not contain security related information and is suitable for public disclosure.

Attachment I contains the redacted version of the Evaluation that was included as Attachment I to the Reference I letter. The redacted version of the Evaluation does not contain security related information. Attachment II contains the same proposed marked-up operating license page for the physical protection license condition for WCGS to reference the commitment change provided in this submittal. Attachment III contains the proposed revised operating license page.

In accordance with 10 CFR 50.91(b), "State consultation," a copy of the redacted amendment application, with attachments, is being provided to the designated Kansas State official.

P.O. Box 411 / Burlington, KS 66839 / Phone: (620) 364-8831 An Equal Opportunity Employer M/F/HCNET Z-

WO 14-0033 Page 2 of 3 This letter contains no new commitments. If you have any questions concerning this matter, please contact me at (620) 364-4156, or Mr. Michael J. Westman at (620) 364-4009.

Sincerely, Russell A. Smith RAS/rlt

Attachment:

II Evaluation of Proposed Change (Redacted)

Ill Proposed Renewed Facility Operating License Change (Mark-up)

Retyped Renewed Facility Operating License Change cc: M. L. Dapas (NRC), w/a T. A. Conley (KDHE), w/a C. F. Lyon (NRC), w/a N. F. O'Keefe (NRC), w/a Senior Resident Inspector (NRC), w/a

WO 14-0033 Page 3 of 3 STATE OF KANSAS )

COUNTY OF COFFEY )

Russell A. Smith, of lawful age, being first duly sworn upon oath says that he is Site Vice President and Chief Nuclear Operating Officer of Wolf Creek Nuclear Operating Corporation; that he has read the foregoing document and knows the contents thereof; that he has executed the same for and on behalf of said Corporation with full power and authority to do so; and that the facts therein stated are true and correct to the best of his knowledge, information and belief.

By ___ __

Russell A. Smith Site Vice President and Chief Nuclear Operating Officer SUBSCRIBED and sworn to before me this 3l1/day of ,2014.

' ý "10. - dl-w

. RY....

- -- :T RHONDA L.TIEMEYER MAyAppointment Expires January 11, 2018 Notary Public illl(dý Expiration Date

SECURITY RELATED INFORMATION WNITHHOLD UNDER 10 CFR 2.390 Attachment I to WO 14-0033 Page 1 of 13 EVALUATION OF PROPOSED CHANGE

Subject:

Revision to Cyber Security Plan Implementation Schedule Completion Date

1.

SUMMARY

DESCRIPTION

2. DETAILED DESCRIPTION

3. TECHNICAL EVALUATION

4. REGULATORY EVALUATION 4.1 Applicable Regulatory Requirements/Criteria 4.2 Significant Hazards Consideration 4.3 Conclusions

5. ENVIRONMENTAL CONSIDERATION

6. REFERENCES REDACTED

SECURITY RELATED INFORMATION WITHHOLD UNDER 10 CFR 2.390 Attachment I to WO 14-0033 Page 2 of 13

1.

SUMMARY

DESCRIPTION The proposed license amendment request includes the proposed completion date change to an implementation schedule milestone and a proposed revision to the renewed facility operating license physical protection license condition (Paragraph 2.E of the Renewed Facility Operating License No. NPF-42).

2. DETAILED DESCRIPTION In Reference 1, the Cyber Security Plan for Wolf Creek Nuclear Operating Corporation, Wolf Creek Generating Station, (hereafter referred to as Cyber Security Plan) and associated implementation schedule were approved by the Nuclear Regulatory Commission (NRC).

Because the Cyber Security Plan Implementation Schedule contained in Reference 2 was utilized as a portion of the basis for the NRC's safety evaluation provided by Reference 1, this proposed amendment request includes: 1) a proposed change to the existing renewed facility operating license condition for the physical protection license condition to reference a deviation for the completion date for an implementation schedule milestone and 2) a proposed Revised Cyber Security Plan Implementation Schedule for the completion date of Implementation Milestone # 8. Implementation Milestone # 8 requires the full implementation of the Wolf Creek Nuclear Operating Corporation (WCNOC) Cyber Security Plan for all SSEP (safety related and important-to safety functions, security functions, and emergency preparedness functions including offsite communications) functions by no later than December 31, 2014. This change proposes a revision to the completion date of Implementation Milestone # 8.

3. TECHNICAL EVALUATION In Reference 3, the Nuclear Energy Institute (NEI) transmitted to the NRC an implementation schedule template to aid compliance with the NRC's cyber security regulations codified in 10 CFR 73.54 which was acknowledged in Reference 4 by the NRC. NEI engaged the industry in an effort to ensure that utilities submit an implementation schedule consistent with the template provided by Reference 3. WCNOC provided the requested implementation schedule in Reference 2 in accordance with the template which the NRC acknowledged in Reference 4.

SECURITY RELATED INFORMATION WITHHOLD UNDER 10 CFR 2.390 Attachment I to WO 14-0033 Page 3 of 13 An NRC memorandum (Reference 7) provides eight criteria for the review of license amendment requests to revise implementation schedule Milestone 8 dates. The following technical evaluation provides information concerning eight criteria that serves to explain the current status of the WCNOC cyber security program and the need for the Implementation Milestone # 8 completion date revision. The evaluation describes how prioritization of WCNOC's complete and planned implementation actions will provide assurance that digital computer and communication systems and networks are adequately protected against cyber attacks up to and including the design basis threat established by 10 CFR 73.1(a)(1)(v), until the full program is implemented by the proposed completion date.

SECURITY RELATED INFORMATION WITHHOLD UNDER 10 CER 2.390 Attachment I to WO 14-0033 Page 4 of 13

SECURITY RELATED INFORMATION WAITHHOLD UNDER 10 CFR 2.390 Attachment I to WO 14-0033 Page 5 of 13

SECURITY RELATEDINFORMATION WITHHOLD UNDER 10 C!F=2.390 Attachment I to WO 14-0033 Page 6 of 13

SECURITY RELATEDINFORMATION W'ITHHOLD UNR*I 10" FR 2.390 Attachment I to WO 14-0033 Page 7 of 13

SECURITY RELATED INFORMATION WITHHOLD UNDER 10 CFR 2.390 Attachment I to WO 14-0033 Page 8 of 13

SECURITY RELATED INFORMATION -WITHHOLD UN*DER !0 CFR 2.390 Attachment I to WO 14-0033 Page 9 of 13

SECURITY REL-ATEDINFORMATION WITHHOLD UNDER 10 CFR 2.390 Attachment I to WO 14-0033 Page 10 of 13 This license amendment request includes the proposed change to the existing renewed facility operating license condition for physical protection (Attachments II and Ill) for WCGS. This license amendment request also contains the proposed revised WCNOC Cyber Security Plan Implementation Schedule (Attachment IV).

4. REGULATORY EVALUATION 4.1 Applicable Regulatory Requirements/Criteria 10 CFR 73.54 requires licensees to maintain and implement a cyber security plan. Wolf Creek Generating Station (WCGS) renewed facility operating license includes a physical protection license condition (Paragraph 2.E of the Renewed Facility Operating License No. NPF-42) that requires Wolf Creek Nuclear Operating Corporation (WCNOC) to fully implement and maintain in effect all provisions of the Commission-approved cyber security plan, including changes made pursuant to the authority of 10 CFR 50.90 and 10 CFR 50.54(p).

4.2 No Significant Hazards Consideration Pursuant to 50.90, "Application for amendment of license, construction permit, or early site permit," Wolf Creek Nuclear Operating Corporation (WCNOC) hereby requests an amendment to the Renewed Facility Operating License No. NPF-42 for the Wolf Creek Generating Station (WCGS). This amendment request proposes a change to the Implementation Milestone # 8 completion date specified in the WCNOC Cyber Security Plan Implementation Schedule.

SECURITY RELATED INFORMATION WITHHOLD

.FR UNDER 10 2.390 Attachment I to WO 14-0033 Page 11 of 13 WCNOC has evaluated whether or not a significant hazards consideration is involved with the proposed amendment by focusing on the three standards set forth in 10 CFR 50.92, Issuance of amendment, as discussed below:

1. Does the proposed change involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No The proposed change to the WCNOC Cyber Security Plan Implementation Schedule is administrative in nature. This change does not alter accident analysis assumptions, add any initiators, or affect the function of plant systems or the manner in which systems are operated, maintained, modified, tested, or inspected. The proposed change does not require any plant modifications which affect the performance capability of the structures, systems, and components (SSCs) relied upon to mitigate the consequences of postulated accidents, and has no impact on the probability or consequences of an accident previously evaluated.

Therefore, the proposed changes do not involve a significant increase in the probability or consequences of an accident previously evaluated.

2. Does the proposed change create the possibility of a new or different kind of accident from any accident previously evaluated?

Response: No The proposed change to the WCNOC Cyber Security Plan Implementation Schedule is administrative in nature. This proposed change does not alter accident analysis assumptions, add any initiators, or affect the function of plant systems or the manner in which systems are operated, maintained, modified, tested, or inspected. The proposed change does not require any plant modifications which affect the performance capability of the SSCs relied upon to mitigate the consequences of postulated accidents, and does not create the possibility of a new or different kind of accident from any accident previously evaluated.

Therefore, the proposed change does not create the possibility of a new or different kind of accident from any previously evaluated.

3. Does the proposed change involve a significant reduction in a margin of safety?

Response: No Plant safety margins are established through limiting conditions for operation, limiting safety system settings, and safety limits specified in the technical specifications. The proposed change to the WCNOC Cyber Security Plan Implementation Schedule is administrative in nature. Since the proposed change is administrative in nature, there is no change to these established safety margins.

Therefore the proposed change does not involve a significant reduction in a margin of safety.

QI~C'l IDIrV D=1 ATr~rl INICnOftAA-rCnKI %A11TLJLJC1r% 1 IkMfD In t-=D 1 'ýtln Attachment I to WO 14-0033 Page 12 of 13 Based on the above evaluations, WCNOC concludes that the proposed amendment presents no significant hazards under the standards set forth in 10 CFR 50.92(c) and, accordingly, a finding of "no significant hazards consideration" is justified.

4.3 Conclusions In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commission's regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

5. ENVIRONMENTAL CONSIDERATION WCNOC has evaluated the proposed change and has determined that the change does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amount of effluent that may be released offsite, or (iii) a significant increase in the individual or cumulative occupational radiation exposure. Accordingly, the proposed changes meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9) and (12). Therefore, pursuant to 10 CFR 51.22(b), an environmental assessment of the proposed change is not required.

6. REFERENCES

1. NRC letter from J. R. Hall, USNRC, to M. W. Sunseri, WCNOC, "Wolf Creek Generating Station - Issuance of Amendment Re: Approval of Cyber Security Plan (TAC NO.

ME4265)," July 27, 2011. (ADAMS Accession No. ML111990339)

2. WCNOC letter WO 11-0017, "Response to Request for Additional Information Regarding License Amendment Request for Approval of the Cyber Security Plan," April 1, 2011.

(ADAMS Accession No. ML110970134)

3. Letter from C. E. Earls, NEI, to R. P. Correia, USNRC, "Template for the Cyber Security Plan Implementation Schedule," dated February 28, 2011. (ADAMS Accession No. ML110600211)

4. Letter from R. P. Correia, USNRC, to C. E. Earls, NEI, "Template for the Cyber Security Plan Implementation Schedule," dated March 1, 2011. (ADAMS Accession No. ML110070348)

5. NEI 08-09, "Cyber Security Plan for Nuclear Power Reactors," Revision 6, April 2010.

6. Memorandum dated July 1, 2013 from B. Westreich, NRC, to T. Blount, NRC, "Enhanced Guidance for Licensee Near-Term Corrective Actions to Address Cyber Security Inspection Findings and Licensee Eligibility for 'Good-Faith' Attempt Discretion."

SECURITY RELATED INFORMATION WITHHOLD UNDER 10 CFR 2.390 Attachment I to WO 14-0033 Page 13 of 13

7. Memorandum dated October 24, 2013, from R. Felts, NRC to B. Westreich, NRC, "Review Criteria for Title 10 of the Code of Federal Regulations Part 73.54, Cyber Security Implementation Schedule Milestone 8 License Amendment Requests." (ADAMS Accession No. ML13295A467)

Attachment II to WO 14-0033 Page 1 of 2 PROPOSED RENEWED FACILITY OPERATING LICENSE CHANGES (MARK-UP)

Attachment II to WO 14-0033 Page 2 of 2 7

(16) Additional Conditions The Additional Conditions contained in Appendix D, as revised through Amendment No. 163, are hereby incorporated into this license. Wolf Creek Nuclear Operating Corporation shall operate the facility in Accordance with the Additional Conditions.

D. Exemptions from certain, requirements of Appendix J to 10 CFR Part 50, and from a portion of the requirements of General Design Criterion 4 of Appendix A to 10 CFR Part 50, are described in the Safety Evaluation Report. These exemptions are authorized by law and will not endanger life or property or the common defense and security and are otherwise in the public interest. Therefore, these exemptions are hereby granted pursuant to 1.0 CFR 50.12- With the granting of these exemptions the facility will operate, to the extent authorized herein, in conformity with the application, as amended, the provisions of the Act, and the rules and regulations of the Commission.

E. The licensee shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73-55 (51 FR 27817 and 27822) and to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The set of combined plans, which contains Safeguards Information protected under 10 CFR 73.21, is entitled- "Wolf Creek Security Plan, Training and Qualification Plan, and Safeguard Contingency Plan,"

and was submitted on May 17,2006.

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved cyber security plan (CSP), including changes made pursuant to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The licensee's CSP was approved by License Amendment No. 197, as supplemented by a changes approved. by License Amendment No. 202 and License Amendment F. Deleted per Amendment No. 141. ENo -Xxx.

G. The licensees shall have and maintain financial protection of such type and in such amounts as the Commission shall require in accordance with Section 170 of the Atomic Energy Act of 1954, as amended, to cover public liability claims.

H. The Updated Safety Analysis Report (USAR) supplement, as revised, submitted pursuant to 10 CFR 54.21(d), shall be induded in the next scheduled update to the USAR required by 10 CFR 50.71(e)(4), as appropriate, following the issuance of this renewed operating license. Until that update is complete, WCNOC may make. changes, to the programs and activities described in the supplement without prior Commission approval, provided that WCNOC evaluates such changes pursuant to the criteria set forth in 10 CFR 50.59 and otherwise complies with the requirements in that section.

Renewed License No. NPF-42 Amendment No. 4e49,Q.9Z, 202

Attachment III to WO 14-0033 Page 1 of 2 RETYPED RENEWED FACILITY OPERATING LICENSE CHANGES

7 (16) Additional Conditions The Additional Conditions contained in Appendix D, as revised through Amendment No. 163, are hereby incorporated into this license. Wolf Creek Nuclear Operating Corporation shall operate the facility in Accordance with the Additional Conditions.

D. Exemptions from certain requirements of Appendix J to 10 CFR Part 50, and from a portion of the requirements of General Design Criterion 4 of Appendix A to 10 CFR Part 50, are described in the Safety Evaluation Report. These exemptions are authorized by law and will not endanger life or property or the common defense and security and are otherwise in the public interest. Therefore, these exemptions are hereby granted pursuant to 10 CFR 50.12. With the granting of these exemptions the facility will operate, to the extent authorized herein, in conformity with the application, as amended, the provisions of the Act, and the rules and regulations of the Commission.

E. The licensee shall fully implement and maintain in effect all provisions of the Commission-approved physical security, training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Requirements revisions to 10 CFR 73.55 (51 FR 27817 and 27822) and to the authority of 10 CFR 50.90 and 10 CFR 50.54(p). The set of combined plans, which contains Safeguards Information protected under 10 CFR 73.21, is entitled: "Wolf Creek Security Plan, Training and Qualification Plan, and Safeguard Contingency Plan," and was submitted on May 17, 2006.

The licensee shall fully implement and maintain in effect all provisions of the Commission-approved cyber security plan (CSP), including changes made pursuant to the authority ofi 0 CFR 50.90 and 10 CFR 50.54(p). The licensee's CSP was approved by License Amendment No. 197, as supplemented by changes approved by License Amendment No. 202 and License Amendment No.

F. Deleted per Amendment No. 141.

G. The licensees shall have and maintain financial protection of such type and in such amounts as the Commission shall require in accordance with Section 170 of the Atomic Energy Act of 1954, as amended, to cover public liability claims.

H. The Updated Safety Analysis Report (USAR) supplement, as revised, submitted pursuant to 10 CFR 54.21(d), shall be included in the next scheduled update to the USAR required by 10 CFR 50.71 (e)(4), as appropriate, following the issuance of this renewed operating license. Until that update is complete, WCNOC may make changes to the programs and activities described in the supplement without prior Commission approval, provided that WCNOC evaluates such changes pursuant to the criteria set forth in 10 CFR 50.59 and otherwise complies with the requirements in that section.

Renewed License No. NPF-42 Amendment No. 17 9., 97 ,-2 02,