ML14031A158

Acceptance Letter - NEI 13-10 Cyber Security Control Assessment

ML14031A158
Person / Time
Site:	Nuclear Energy Institute
Issue date:	02/03/2014
From:	Westreich B C Office of Nuclear Security and Incident Response
To:	Kline D R Nuclear Energy Institute
References
NEI 13-10, Rev 1
Download: ML14031A158 (2)

Text

February 3, 2014

Mr. David R. Kline Director, Security Nuclear Energy Institute 1776 I Street, NW, Suite 400 Washington, D

.C. 20006

SUBJECT:

NUCLEAR ENERGY INSTITUTE 13

-10, "CYBER SECURITY CONTROL ASSESSMENTS," REVISION 0, DATED JANUARY 2014

Dear Mr. Kline:

In your letter dated January, 31, 2014, you requested that the U.S. Nuclear Regulatory Commission (NRC) staff review and endorse the Nuclear Energy Institute's (NEI's) guidance document NEI 13

-10, "Cyber Security Control Assessments," Revision 0 , dated January 201 4 , (Agencywide Documents Access and Management System (ADAMS)

Accession No. ML14034A076

). The NRC staff completed its review of the submitted NEI 13-10, using Title 10 of the Code of Federal Regulations Part 73.54 "Protection of Digital Computer and Communication Systems and Networks," Regulatory Guide 5.71 "Cyber Security Programs for Nuclear Facilities," and NEI 08

-09 "Cyber Security Plan for Nuclear Power Reactors,"

Revision 6, dated April 2010.

Based on the review, the staff concluded that NEI 13-10, Revision 0 is acceptable for use by licensees to address security controls as provided Section 3.1.6 of their cyber security plans.

P l ea s e c o n t a ct Russell Felts a t (3 0 1) 287- 3607 o r E r i c L e e a t (3 0 1) 287-3461 i f y o u ha v e any q u e s t i o n s. S i n c e r e l y, /RA/

Barry C. Westreich , Di r e c t or Cyber Security Directorate O f f i ce o f N u c l e a r S e c u r i t y a n d I n c i d e n t R e s p on s e

ML14034A079 OFFICE CSD/NSIR DD:CSD/NSIR D:CSD/NSIR NAME E. Lee R. Felts B. Westreich DATE 1/31/14 2/3/14 2/3/14