IR 05000321/2013404

IR 05000321-13-404 & 05000366-13-404, 9/13/2013, Edwin I. Hatch Nuclear Plant; NRC Temporary Instruction 2201/004; Inspection of Implementation of Interim Cyber Security Milestones 1-7

ML13297A499
Person / Time
Site:	Hatch
Issue date:	10/23/2013
From:	King M F NRC/RGN-II/DRS/EB2
To:	Madison D R Southern Nuclear Operating Co
References
IR-13-404
Download: ML13297A499 (5)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION REGION II 245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 October 23, 2013 Mr. Dennis Vice President

Southern Nuclear Operating Company, Inc.

Edwin I. Hatch Nuclear Plant 11028 Hatch Parkway North

Baxley, GA 31513

SUBJECT: EDWIN I. HATCH NUCLEAR PLANT- NRC TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7" INSPECTION REPORT NO. 05000321/2013404 AND 05000366/2013404

Dear Mr. Madison:

On September 13, 2013, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite activities associated with the inspection at your Hatch Nuclear Plant, Units 1 and 2. The enclosed report documents the results of this inspection, which were discussed on September 13, 2013, with you and other members of your staff.

The inspection examined activities conducted under your license as they relate to safety and compliance with the commission's rules and regulations and with the conditions of your license related to the implementation of interim cyber security milestones. The inspection was conducted in accordance with NRC Temporary Instruction (TI) 2201/004, "Inspection of Implementation of Interim Cyber Security Milestones 1-7" issued January 3, 2013.

Two findings of very low safety significance (Green) which were determined to involve violations of NRC requirements were identified during this inspection. Further, two licensee-identified violations, which were determined to be of very low safety significance (Green) are listed in this report. These violations are being treated as Non-Cited Violations (NCVs), consistent with Section 2.3.2 of the Enforcement Policy.

The issues above were discussed at the Security Issues Forum (SIF) panel meeting on September 18, 2013. Based upon the meeting, a determination was made to exercise enforcement discretion due to your "good-faith" attempt to interpret and implement Interim Cyber Security Milestones 1 - 7 commitments. The exercise of enforcement discretion requires that you accept the NRC's characterization of the identified findings, put the findings into your corrective action program (CAP), and take appropriate corrective action to restore compliance in a timely manner. Upon completion of all corrective actions, you are requested to provide written notification to the NRC's regional office as to the method and date of closure for the identified issue(s). If you contest the violations or significance of the NCVs discussed in the report, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region II; the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC Resident Inspector at Hatch Nuclear Plant.

In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be

available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of the NRC's Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and security-related information is necessary to provide an acceptable response, please mark your entire response "Security-Related Information-Withhold from Public Disclosure under 10 CFR 2.390," in accordance with 10 CFR 2.390(d)(1), and follow the instructions for withholding in 10 CFR 2.390(b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,

/RA/ Michael F. King, Chief Engineering Branch 2 Division of Reactor Safety

Docket No.: 50-321, 50-366 License No.: DPR-57, NPF-5

Enclosure: Inspection Report No. 05000321/2013404 and 05000366/2013404 w/ Attachment: Supplementary Information (Official Use Only - Security Related Information)

cc: (See page 3)

_ML13297A499_______________ x SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS RII:DRS CONTRACTOR RII:DRS RII:DRP RII:DRS SIGNATURE RA RA RA RA VIA EMAIL RA RA RA NAME FANNER MONTGOMERY SINGLETARY RORABAUGH KING EHRHARDT KING DATE 10/21/2013 10/ 21/2013 10/21/2013 10/18 /2013 10/23/2013 10/232013 10/ 23/2013 E-MAIL COPY? YES NO YES NO YES NO YES NO YES NO YES NO YES NO cc: Keith Wooten

Project Manager Nuclear Fleet Security Southern Nuclear Operating Company, Inc.

40 Iverness Center Parkway

Birmingham, AL 35242

David Burford Manager Nuclear Fleet Security

Southern Nuclear Operating Company, Inc.

40 Iverness Center Parkway

Birmingham, AL 35242 L. B. Hogg Nuclear Licensing

Southern Nuclear Operating Company, Inc.

40 Inverness Center Parkway Birmingham, AL 35242

Jonathan M. Merritt Site Security Manager Edwin I. Hatch Nuclear Plant 11028 Hatch Parkway North Baxley, GA 31513 Letter to from Michael F. King dated October 23, 2013.

SUBJECT: EDWIN I. HATCH - NRC TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7" INSPECTION REPORT NO. 05000321/2013404 AND

05000366/2013404

Distribution:

C. Evans, RII EICS (Part 72 Only) L. Douglas, RII EICS (Linda Douglas) B. Westreich, NSIR (hard copy w/ encl)

G. West Jr., NSIR (hard copy w/ encl)

N. Coleman, OE (hard copy w/encl)

RidsNrrPMHatch Resource RIDSNRRDIRS

Distribution w/o Encl:

PUBLIC