IR 05000277/2014404

IR 05000277/2014404 and 05000278/2014404; 05/28/2014; Exelon Generation Company, Peach Bottom Atomic Power Station, Units 2 and 3; Temporary Instruction 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1 to 7: Let

ML14171A313
Person / Time
Site:	Peach Bottom
Issue date:	06/19/2014
From:	Rogge J Engineering Region 1 Branch 3
To:	Pacilio M Exelon Generation Co, Exelon Nuclear
References
IR-14-404
Download: ML14171A313 (4)

Text

J. Pacher UNITED STATES NUCLEAR REGULATORY COMMISSION

REGION I

2100 RENAISSANCE BLVD., SUITE 100 KING OF PRUSSIA, PA 19406-2713 June 19, 2014 Mr. Michael Senior Vice President, Exelon Generation Company, LLC President and Chief Nuclear Officer, Exelon Nuclear 4300 Winfield Rd.

Warrenville, IL 60555 SUBJECT: PEACH BOTTOM ATOMIC POWER STATION, UNITS 2 AND 3 - NRC CYBER SECURITY INSPECTION REPORT 05000277/2014404 AND 05000278/2014404

Dear Mr. Pacilio:

On May 28, 2014, the U.S. Nuclear Regulatory Commission (NRC) completed a follow-up inspection to unresolved items (URI) from a previous cyber security inspection at your Peach Bottom Atomic Power Station (PBAPS), Units 2 and 3. The URIs were documented in NRC inspection report (IR) 05000277/2013404 and 05000278/2013404. The results of the follow-up and closure of the URIs were discussed with Mr. Michael Massaro and other members of your staff on May 28, 2014, and are documented in this IR.

The inspection examined activities conducted under your license as they relate to cyber security and compliance with the Commissions rules and regulations and with the conditions of your license. The inspector reviewed selected procedures and records, observed activities, and interviewed personnel.

The report documents one violation for which the NRC is exercising enforcement discretion.

The NRC is not taking enforcement action for this violation because it meets the criteria established in an NRC Memorandum from Barry C. Westreich, Director, Cyber Security Directorate, Office of Nuclear Security and Incident Response, to each regional office and Director, Division of Reactor Safety, Subject: Enhanced Guidance for Licensee Near-Term Corrective Actions to Address Cyber Security Inspection Findings and Licensee Eligibility for Good-Faith Attempt Discretion dated July 1, 2013 (ADAMS Accession Number ML13178A203). Corrective actions associated with this violation were verified onsite by the NRC inspector to be complete and no further correspondence on this matter is necessary.

Enclosure contains Sensitive Unclassified Non-Safeguards Information.

When separated from enclosure, the transmittal document is decontrolled. If you contest the violation or its significance, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region I; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC resident inspector at the Peach Bottom Atomic Power Station.

In accordance with Title 10 of the Code of Federal Regulations (10 CFR) 2.390 of the NRC's

"Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's Agencywide Document Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room). However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security-Related Information is necessary to provide an acceptable response, please mark your entire response "Security-Related Information - Withhold from public disclosure under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390 (b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,

/RA/

John F. Rogge, Chief Engineering Branch 3 Division of Reactor Safety Docket Nos.: 50-277, 50-278 License Nos.: DPR-44, DPR-56 Enclosure:

Inspection Report 05000277/2014404 and 05000278/2014404 w/Attachment: Supplemental Information cc w/o encl; w/oOUO-SRI: Distribution via ListServ cc w/encl; w/OUO-SRI:

P. Simmons, Manager, Site Security D. Allard, Director, PA DEP T. Levering, MD Emergency Response Director A. Lauland, Director, MD Office of Homeland Security ML14171A313 (Cover letter) ADAMS ACCESSION NUMBER: ML14171A308 (Cover letter w/enclosure)

Cover Letter Non-Sensitive Publicly Available SUNSI Review Sensitive Non-Publicly Available Cover Letter w/Enclosure Non-Sensitive Publicly Available SUNSI Review Sensitive Non-Publicly Available OFFICE RI/DRS RI/DRS NAME DOrr JRogge DATE 06/19/14 06/19/14 Distribution w/encl; w/OUO-SRI:

G. West, NSIR N. Simonian, NSIR E. Wharton, NSIR S. Shaeffer, DRS, RII R. Daley, DRS, RIII G. Werner, DRS, RIV F. Bower, DRP S. Hansell, SRI Distribution w/o encl; w/o OUO-SRI:

W. Dean, RA (R1ORAMAIL Resource)

D. Lew, DRA (R1ORAMAIL Resource)

M. Scott, DRP (R1DRPMAIL Resource)

H. Nieh, DRP (R1DRPMAIL Resource)

R. Lorson, DRS (R1DRSMAIL Resource)

J. Trapp, DRS (R1DRSMAIL Resource)

F. Bower, DRP S. Barber, DRP A. Turilin, DRP B. Lin, DRP S. Hansell, DRP, SRI B. Smith, DRP, RI S. Schmitt, DRP, AA J. Nick, RI, OEDO RidsNrrPMPeachBottom Resource RidsNrrDorlLpl1-2 Resource ROPreports Resource