|
|
| (One intermediate revision by the same user not shown) |
| Line 3: |
Line 3: |
| | issue date = 07/11/2012 | | | issue date = 07/11/2012 |
| | title = Draft SSES Cyber Security RAI v2 | | | title = Draft SSES Cyber Security RAI v2 |
| | author name = Whited J A | | | author name = Whited J |
| | author affiliation = NRC/NRR/DORL/LPLI-2 | | | author affiliation = NRC/NRR/DORL/LPLI-2 |
| | addressee name = Manges C E | | | addressee name = Manges C |
| | addressee affiliation = PPL Susquehanna, LLC | | | addressee affiliation = PPL Susquehanna, LLC |
| | docket = 05000387, 05000388 | | | docket = 05000387, 05000388 |
| | license number = | | | license number = |
| | contact person = Whited J A | | | contact person = Whited J |
| | package number = ml12193A570 | | | package number = ml12193A570 |
| | document type = Request for Additional Information (RAI) | | | document type = Request for Additional Information (RAI) |
| Line 16: |
Line 16: |
|
| |
|
| =Text= | | =Text= |
| {{#Wiki_filter:DRAFT DRAFT OFFICE OF NUCLEAR SECURITY AND INCIDENT RESPONSE REQUEST FOR ADDITIONAL INFORMATION CHANGES TO CYBER SECUR ITY IMPLEMENTATION SCHEDULE MILESTONES 3 AND 6 PPL SUSQUEHANNA, LLC ALLEGHANY ELECTRIC COOPERATION, INC. | | {{#Wiki_filter:DRAFT OFFICE OF NUCLEAR SECURITY AND INCIDENT RESPONSE REQUEST FOR ADDITIONAL INFORMATION CHANGES TO CYBER SECURITY IMPLEMENTATION SCHEDULE MILESTONES 3 AND 6 PPL SUSQUEHANNA, LLC ALLEGHANY ELECTRIC COOPERATION, INC. |
| DOCKET NUMBERS 50 | | SUSQUEHANNA STEAM ELECTRIC STATION, UNITS 1 AND 2 DOCKET NUMBERS 50-387 AND 50-388 By letter dated April 30, 2012, 1 PPL Susquehanna, LLC (PPL) submitted a license amendment request for Susquehanna Steam Electric Station, Units 1 and 2 (SSES). The proposed amendment would make changes to the cyber security implementation schedule for Milestone 3 and 6. Specifically, for Milestone 3, PPL proposes to install a deterministic data diode appliance between Layers 3 and 2 instead of between Layers 3 and 4 with no change to the approved implementation date. For Milestone 6, PPL proposes to implement the technical controls for critical digital assets (CDAs) that could adversely impact the design function of physical security target set equipment by the approved implementation date, and to implement the operational and management controls for CDAs in conjunction with the full implementation of the Cyber Security Program. |
| -387 AND 50 | |
| -388 SUSQUEHANNA STEAM ELECTRIC STATION, UNITS 1 AND 2 By letter dated April 30, 2012, 1 PPL Susquehanna, LLC (PPL) submitted a license amendment request for Susquehanna Steam Electric Station, Units 1 and 2 (SSES). | |
| The proposed amendment would make changes to the cyber security implementation schedule for Milestone 3 and 6. Specifically, for Milestone 3 | |
| , PPL proposes to install a deterministic data diode appliance between Layers 3 and 2 instead of between Layers 3 and 4 with no change to the approved implementation date. | |
| For Milestone 6, PPL proposes to implement the technical controls for critical digital assets (CDAs) that could adversely impact the design function of physical security target set equipment by the approved implementation date, and to implement the operational and management controls for CDAs in conjunction with the full implementation of the Cyber Security Program. | |
| The U.S. Nuclear Regulatory Commission (NRC) staff has reviewed the information provided by the licensee and has determined that the following additional information is needed in order to complete the review. | | The U.S. Nuclear Regulatory Commission (NRC) staff has reviewed the information provided by the licensee and has determined that the following additional information is needed in order to complete the review. |
| Milestone 3 of the Cyber Security Implementation Schedule implements installation of a deterministic one | | Milestone 3 of the Cyber Security Implementation Schedule implements installation of a deterministic one-way device between lower level devices and higher level devices as described in Section 4.3, Defense-in-Depth Protective Strategies of the Cyber Security Plan (CSP). In the April 30, 2012, request PPL states that (emphasis added) [f]or non-security critical digital assets (CDAs), the current implementation schedule and cyber security plan describe deterministic devices between Layers 3 and 4 with firewalls between Layers 1 and 2 and between Layers 2 and 3. PPL goes on to describe that the proposed change to the cyber defensive strategy would install a deterministic device between Layers 2 and 3 with firewalls between the other layers. |
| -way device between lower level devices and higher level devices as described in Section 4.3, "Defense | | The NRC staff would like to clarify that this proposed change does not only impact Milestone 3, but also directly impacts the CSP, Section 4.3, Defense-in-Depth Protective Strategies. Will security CDAs and safety CDAs (both residing in Layer 4) continue to be isolated from each other as described in the existing CSP? |
| -in-Depth Protective Strategies" of the Cyber Security Plan (CSP). In the April 30, 2012, request PPL states that (emphasis added) | | 1 Agencywide Documents Access and Management System (ADAMS) Accession No. ML12122A011 DRAFT}} |
| "[f]or non-security critical digital assets (CDAs), the current implementation schedule and cyber security plan describe deterministic devices between Layers 3 and 4 with firewalls between Layers 1 and 2 and between Layers 2 and 3.
| |
| " PPL goes on to describe that the proposed change to the cyber defensive strategy would install a deterministic device between Layers 2 and 3 with firewalls between the other layers.
| |
| The NRC staff would like to clarify that this proposed change does not only impact Milestone 3, but also directly impacts the CSP, Section 4.3, "Defense | |
| -in-Depth Protective Strategies." Will security CDAs and safety CDAs (both residing in Layer 4) continue to be isolated from each other as described in the existing CSP? | |
| | |
| 1 Agencywide Documents Access and Management System (ADAMS) Accession No. ML12122A011}} | |
|
|---|
Category:Request for Additional Information (RAI)
MONTHYEARML24150A3362024-05-29029 May 2024
Request for Confirmation of Information Relief Request 1RR06 (Proposed Alternative) Susquehanna Nuclear, LLC Susquehanna Steam Electric Station (Susquehanna), Unit 1 Docket No. 50-387
IR 05000387/20244042024-05-0707 May 2024
Information Request for the Cybersecurity Baseline Inspection, Notification to Perform Inspection 05000387/2024404 and 05000388/2024404
ML24102A1252024-04-10010 April 2024
Request for Additional Information for Susquehanna, Unit 1 Alternative Request 4RR-11
ML23334A1502023-11-30030 November 2023
NRC Request for Additional Information Re. Susquehanna Relief Request RR-02
ML23277A0412023-10-0505 October 2023
Notification of Commercial Grade Dedication Inspection (05000387/2024011 and 05000388/2024011) and Request for Information
ML23013A2082023-01-13013 January 2023
Request for Additional Information
ML22146A1022022-05-26026 May 2022
Information Request for the Cyber Security Baseline Inspection, Notification to Perform Inspection 05000387/2022404 and 05000388/2022404
ML22146A0742022-05-25025 May 2022
NRR E-mail Capture - NRC Request for Additional Information - Susquehanna License Amendment Request
ML22111A3132022-04-21021 April 2022
NRR E-mail Capture - NRC Request for Additional Information - Susquehanna License Amendment Request
ML22041A1562022-02-10010 February 2022
Information Request for a Triennial Baseline Design Bases Assurance Inspection (Team); Inspection Report 05000387/2022013 and 05000388/2022013
ML21316A1242021-11-18018 November 2021
Supplemental Information Needed for Acceptance of Requested Licensing Action Regarding Emergency Core Cooling Technical Specifications
ML20056E4392020-02-21021 February 2020
Ti 2515/194 Inspection Documentation Request
ML20010D2012020-01-0909 January 2020
Request for Additional Information Related to Request to Allow Application of Framatome Analysis Methodologies Necessary to Support a Planned Transition to Atrium 11 Fuel Under Maximum
ML19319A0092019-11-14014 November 2019
NRR E-mail Capture - Draft RAI for SSES Units 1 and 2 LAR to Replace ESW Piping
ML19319B1922019-11-14014 November 2019
NRR E-mail Capture - RAI for Susquehanna, 1 and 2 License Amendment Request - Replace the Emergency Service Water System and Residual Heat Removal Service Water System
ML19128A0232019-05-0707 May 2019
Request for Additional Information: Susquehanna Steam Electric Station, Units 1 and 2 License Amendment Request for ESW Piping Replacement
ML18352B1832018-12-13013 December 2018
Enclosurequest for Additional Information (Letter to K. Cimorelli Request for Additional Information Regarding Susquehanna Nuclear, Llc'S Decommissioning Funding Plan Update for Susquehanna Steam Electric Station Independent Spent Fuel Stor
ML17180A2002017-07-0707 July 2017
Request for Additional Information Regarding License Amendment Request to Revise Diesel Generator Surveillance Requirements with New Steady State Voltage and Frequency Limits
ML17059D2142017-03-0606 March 2017
Susquehanna Steam Electric Station - Supplemental Information Needed for Acceptance of Requested Licensing Action Re: License Amendment Request to Revise Diesel Generator Surveillance Requirements with New Steady State Voltage Frequency Limits
ML16251A0652016-09-0909 September 2016
Susquehanna Steam Electric Station, Unit 2 - RAI Regarding Temporary Change of Unit 2, Technical Specifications 3.7.1 & 3.8.7 to Allow Replacement of Unit 1, 480 Volt Engineered Safeguard System Load Center Transformers(CAC No. MF7298)
ML16245A2052016-09-0101 September 2016
Draft Request for Additional Information Replacement of Load Center Transformers
ML16243A0952016-08-30030 August 2016
Draft Request for Additional Information Application for Approval of Indirect Transfer of Control of Licenses
ML16060A2302016-03-24024 March 2016
Acceptance of Requested Licensing Action License Amendment Request for Temporary Change of Unit 2 Technical Specifications 3.71 and 3.87 to Allow Replacement of Unit 1 480V Ess Load Center Transformers
ML15316A5632015-11-13013 November 2015
Request for Additional Information Regarding Proposed Relief Requests for the Third 10-Year Inservice Inspection Interval(Cac Nos. MF6302 Through MF6307)
ML15292A1782015-10-15015 October 2015
TSTF-425 LAR Draft 3rd RAIs
ML15230A0802015-08-26026 August 2015
Request for Additional Information Regarding License Amendment Request to Adopt NEI 99-01, Revision 6, EAL Scheme Change
ML15209A9742015-08-24024 August 2015
Request for Additional Information License Amendment Request to Adopt Technical Specifications Task Force Traveler (TSTF)-425
ML15230A0462015-08-17017 August 2015
Draft RAIs SSES EAL Scheme Change LAR in Accordance with NEI 99-01 Rev 6
ML15229A2092015-08-17017 August 2015
SSES Draft Request for Additional Information Licensee Request to Adopt TSTF-425
ML15229A2002015-08-17017 August 2015
E-mail from J. Whited to J. Jennings SSES Draft TSTF-425 RAIs
ML15183A3502015-07-0202 July 2015
SSES Relief Requests 3RR-19, 3RR-20, and 3RR-21 Draft Identified Information Insufficiencies (TAC Nos. MF6302 Through MF6307)
ML15103A3962015-05-22022 May 2015
Request for Additional Information License Amendment Request to Adopt Technical Specifications Task Force Traveler (TSTF)-425 (TAC Nos. MF5151 and MF5152)
ML15128A5092015-05-0808 May 2015
E-mail from J. Whited to D. Filchner SSES Draft Request for Additional Information LAR for Implementation of TSTF-425
ML15128A5162015-05-0808 May 2015
SSES Draft Request for Additional Information LAR for Implementation of TSTF-425
ML15008A4702015-01-30030 January 2015
Request for Additional Information Request to Revise Technical Specification 3.4.10, RCS Pressure and Temperature (P/T) Limits.
ML15016A2742015-01-16016 January 2015
Draft RAIs License Amendment Request for Change to TS 3.4.10 P/T Limits (TAC Nos. MF4597 and MF45980)
ML15016A2722015-01-16016 January 2015
E-mail from J. Whited to D. Filchner Draft RAIs License Amendment Request for Change to TS 3.4.10 P/T Limits (TAC Nos. MF4597 and MF45980)
ML14343A9842015-01-0808 January 2015
Request for Additional Information Relief Request 4RR-01
ML14345A2412014-12-16016 December 2014
Request for Additional Information Request for Order Approving Indirect Transfer of Control and Conforming License Amendments
ML14346A4022014-12-12012 December 2014
Draft RAIs Relief Request 4RR-01
ML14346A4012014-12-12012 December 2014
E-mail from J. Whited to D. Filchner Susquehanna Steam Electric Station Draft RAIs Relief Request 4RR-01
ML14346A1022014-12-12012 December 2014
Draft License Transfer Revised 2nd RAIs
ML14346A1002014-12-12012 December 2014
E-mail from J. Whited to R. Sgarro Susquehanna Steam Electric Station Draft License Transfer Revised 2nd RAIs
ML14342A8132014-12-0808 December 2014
SSES Units 1 and 2 Draft RAIs Application for Approval of Indirect Transfer of Control of Licenses
ML14342A8082014-12-0808 December 2014
E-mail from J. Whited to R. Sgarro (PPL) SSES Units 1 and 2 Draft RAIs Application for Approval of Indirect Transfer of Control of Licenses
ML14233A2772014-08-27027 August 2014
Request for Additional Information License Amendment Request to Change the Low Pressure Safety Limit
ML14233A3392014-08-21021 August 2014
Draft RAIs for Susquehanna Steam Electric Station Units 1 and 2 License Amendment Request for Changes to the Low Pressure Safety Limits
ML13298A7582014-03-0707 March 2014
Request for Additional Information Regarding Request for Changes to Technical Specification Surveillance Requirements to Increase Diesel Generator Minimum Steady State Voltage (TAC ME9607 and ME960)
ML13298A7812014-03-0707 March 2014
Request for Additional Information Regarding Request for Changes to Technical Specification Surveillance Requirement 3.8.1.19 to Increase Diesel Generator Minimum Steady State Frequency (TACs ME9609.
ML14013A1502014-01-31031 January 2014
Request for Additional Information Regarding Relief Requests for the Fourth 10-Year Inservice Testing Interval
2024-05-07
[Table view] |
Text
DRAFT OFFICE OF NUCLEAR SECURITY AND INCIDENT RESPONSE REQUEST FOR ADDITIONAL INFORMATION CHANGES TO CYBER SECURITY IMPLEMENTATION SCHEDULE MILESTONES 3 AND 6 PPL SUSQUEHANNA, LLC ALLEGHANY ELECTRIC COOPERATION, INC.
SUSQUEHANNA STEAM ELECTRIC STATION, UNITS 1 AND 2 DOCKET NUMBERS 50-387 AND 50-388 By letter dated April 30, 2012, 1 PPL Susquehanna, LLC (PPL) submitted a license amendment request for Susquehanna Steam Electric Station, Units 1 and 2 (SSES). The proposed amendment would make changes to the cyber security implementation schedule for Milestone 3 and 6. Specifically, for Milestone 3, PPL proposes to install a deterministic data diode appliance between Layers 3 and 2 instead of between Layers 3 and 4 with no change to the approved implementation date. For Milestone 6, PPL proposes to implement the technical controls for critical digital assets (CDAs) that could adversely impact the design function of physical security target set equipment by the approved implementation date, and to implement the operational and management controls for CDAs in conjunction with the full implementation of the Cyber Security Program.
The U.S. Nuclear Regulatory Commission (NRC) staff has reviewed the information provided by the licensee and has determined that the following additional information is needed in order to complete the review.
Milestone 3 of the Cyber Security Implementation Schedule implements installation of a deterministic one-way device between lower level devices and higher level devices as described in Section 4.3, Defense-in-Depth Protective Strategies of the Cyber Security Plan (CSP). In the April 30, 2012, request PPL states that (emphasis added) [f]or non-security critical digital assets (CDAs), the current implementation schedule and cyber security plan describe deterministic devices between Layers 3 and 4 with firewalls between Layers 1 and 2 and between Layers 2 and 3. PPL goes on to describe that the proposed change to the cyber defensive strategy would install a deterministic device between Layers 2 and 3 with firewalls between the other layers.
The NRC staff would like to clarify that this proposed change does not only impact Milestone 3, but also directly impacts the CSP, Section 4.3, Defense-in-Depth Protective Strategies. Will security CDAs and safety CDAs (both residing in Layer 4) continue to be isolated from each other as described in the existing CSP?
1 Agencywide Documents Access and Management System (ADAMS) Accession No. ML12122A011 DRAFT
