ML15280A459

River Bend Station - NRC Temporary Instruction 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7, Inspection Report 05000458/2015405

ML15280A459
Person / Time
Site:	River Bend
Issue date:	10/07/2015
From:	Werner G E NRC/RGN-IV/DRS/EB-2
To:	Olson E W Entergy Operations
References
IR 2015405
Download: ML15280A459 (4)

See also: IR 05000458/2015405

Text

" " October 7, 2015 Mr. Eric W. Olson, Site Vice President Entergy Operations, Inc.

River Bend Station 5485 US Highway 61N St. Francisville, LA 70775

SUBJECT: RIVER BEND STATION - NRC TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7," INSPECTION REPORT 05000458/2015405

Dear Mr. Olson:

On September 11, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed a security temporary instruction inspection at River Bend Station. The inspection covered the implementation of interim milestones associated with your cyber security program, as outlined in your approved cyber security plan and described in Temporary Instruction 2201/004, "Inspection of Implementation of Interim Cyber Security Milestones 1-7," Revision 1. The enclosed inspection report documents the inspection results that were discussed on September 11, 2015, with you and other members of your staff.

The inspection examined activities conducted under your license as they relate to safety and compliance with the Commission's rules and regulations and with the conditions of your license.

The inspectors reviewed selected procedures and records, observed activities, and interviewed personnel.

NRC inspectors documented one violation of very low significance in this report. The finding involved a violation of NRC requirements. The NRC is treating this violation as a non-cited violation consistent with Section 2.3.2.a of the Enforcement Policy. This issue was discussed and reviewed during a Security Issues Forum Panel meeting conducted on September 9, 2015. The Security Issues Forum Panel review concluded that, although this issue constituted a violation of Title 10 of the Code of Federal Regulations (10 CFR), Part 73, Section 54, "Protection of Digital Computer and Communication Systems and Networks," the NRC is exercising enforcement discretion. The NRC is exercising enforcement discretion for this violation because it meets the criteria established in an NRC memorandum from Barry C. Westreich, Director, Cyber Security Directorate, Office of Nuclear Security and Incident Response, to each regional office and Director, Division of Reactor Safety, Subject: Enhanced Guidance for Licensee Near-Term Corrective Actions to Address Cyber Security Inspection Findings and Licensee Eligibility for "Good-Faith" Attempt Discretion, dated July 1, 2013, (ADAMS Accession Number ML13178A203). Consistent with the NRC Memorandum, when you complete and close corrective actions associated with this violation, you are requested to provide written notification to the NRC's regional office as to the method and date of closure of the corrective actions for the identified violation.

If you contest the violation or significance of this non-cited violation, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region IV; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC resident inspector at River Bend Station.

In accordance with 10 CFR 2.390, "Public Inspections, Exemptions, Requests for Withholding," of the NRC's "Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC's Public Document Room or from the Publicly Available Records (PARS) component of the NRC's Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

The material enclosed herewith, however, contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security-Related Information is necessary to provide an acceptable response, please mark your entire response "Security-Related Information-Withhold from public disclosure under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1).

In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,/RA/

Gregory E. Werner, Chief Engineering Branch 2 Division of Reactor Safety Docket No. 50-458 License No. NPF-47

Nonpublic

Enclosure:

Inspection Report 05000458/2015405

w/Attachment:

Supplemental Information cc w/o encl: Electronic Distribution Findings and Licensee Eligibility for "Good-Faith" Attempt Discretion, dated July 1, 2013, (ADAMS Accession Number ML13178A203). Consistent with the NRC Memorandum, when you complete and close corrective actions associated with this violation, you are requested to provide written notification to the NRC's regional office as to the method and date of closure of the corrective actions for the identified violation.

If you contest the violation or significance of this non-cited violation, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region IV; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC resident inspector at River Bend Station. In accordance with 10 CFR 2.390, "Public Inspections, Exemptions, Requests for Withholding,"

of the NRC's "Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC's Public Document Room or from the Publicly Available Records (PARS) component of the NRC's Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

The material enclosed herewith, however, contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security-Related Information is necessary to provide an acceptable response, please mark your entire response "Security-Related Information-Withhold from public disclosure under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,/RA/ Gregory E. Werner, Chief Engineering Branch 2 Division of Reactor Safety Docket No. 50-458 License No. NPF-47 Nonpublic

Enclosure:

Inspection Report 05000458/2015405

w/Attachment:

Supplemental Information cc w/o encl: Electronic Distribution DISTRIBUTION: See next page ADAMS ACCESSION NUMBER: ML15280A459 Entire Report: SUNSI Review By: EUribe Non-Sensitive Sensitive Publicly Available Non-Publicly Available Keyword: NRC-002 MD 3.4 Non-Public A.3 Cover Letter Only:

SUNSI Review By: EUribe Non-Sensitive Sensitive Publicly Available Non-Publicly Available Keyword: RGN-002 SUNSI Review Complete OFFICE RI:DRS/EB2 RI:DRS/EB2 CSS:CSD/NSIR SRA C:PBC C:EB2 NAME EUribe DLivermore KLawson-Jenkins MBuckley GWarnick GWerner SIGNATURE /RA/ Email Email Email /RA/ /RA/ DATE 10/6/15 9/9/15 9/9/15 10/6/15 10/7/15 10/7/15 Letter to Eric from Gregory E. Werner, dated October 7, 2015

SUBJECT: RIVER BEND STATION - NRC TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7," INSPECTION REPORT 05000458/2015405 Electronic distribution by RIV with enclosure: Director, Cyber Security Directorate (James.Andersen@nrc.gov)

Deputy Director, Cyber Security Directorate (Russell.Felts@nrc.gov) Chief, Reactor Security Oversight Branch (Ronald.Albert@nrc.gov) Acting Chief, Security Training and Support Branch (Joseph.Willis@nrc.gov)

Branch Chief, RI DRS/EB3 (John.Rogge@nrc.gov)

Branch Chief, RII DRS/EB2 (Scott.Shaeffer@nrc.gov)

Branch Chief, RIII DRS/EB3 (Robert.Daley@nrc.gov)

Branch Chief, Security Performance Evaluation (Clay.Johnson@nrc.gov) Senior Emergency Response Coordinator, ORA/RCB (Nester.Makris@nrc.gov) Security Analyst, NSIR (Larry.Jones@nrc.gov)

Senior Resident Inspector (Nicholas.Hernandez@nrc.gov)

Electronic distribution by RIV without enclosure: Regional Administrator (Marc.Dapas@nrc.gov) Deputy Regional Administrator (Kriss.Kennedy@nrc.gov)

DRP Director (Troy.Pruett@nrc.gov)

DRP Deputy Director (Ryan.Lantz@nrc.gov)

DRS Director (Anton.Vegel@nrc.gov)

DRS Deputy Director (Jeff.Clark@nrc.gov) Senior Resident Inspector (Jeffrey.Sowa@nrc.gov) Senior Resident Inspector (Nicholas.Hernandez@nrc.gov)

Resident Inspector (Brian.Parks@nrc.gov)

RBS Administrative Assistant (Lisa.Day@nrc.gov)

Branch Chief, DRP/C (Greg.Warnick@nrc.gov) Senior Project Engineer (Ray.Azua@nrc.gov) Senior Project Engineer (Cale.Young@nrc.gov)

Project Engineer (Michael.Stafford@nrc.gov)

Public Affairs Officer (Victor.Dricks@nrc.gov)

Public Affairs Officer (Lara.Uselding@nrc.gov) Project Manager (Alan.Wang@nrc.gov) Acting Team Leader, DRS/TSS (Eric.Ruesch@nrc.gov)

RITS Coordinator (Marisa.Herrera@nrc.gov)

ACES (R4Enforcement.Resource@nrc.gov)

Regional Counsel (Karla.Fuller@nrc.gov)

Technical Support Assistant (Loretta.Williams@nrc.gov) Congressional Affairs Officer (Jenny.Weil@nrc.gov) RIV Congressional Affairs Officer (Angel.Moreno@nrc.gov)

RIV/ETA: OEDO (Cindy.Rosales-Cooper@nrc.gov)

ROPreports