Letter Sequence RAI |
---|
TAC:ME4356, (Approved, Closed) TAC:ME4357, (Approved, Closed) TAC:ME4358, (Approved, Closed) TAC:ME4359, (Approved, Closed) TAC:ME4360, (Approved, Closed) TAC:ME4361, (Approved, Closed) |
|
|
|
---|
Category:Letter
MONTHYEARNL-24-0320, License Amendment Request Proposing a New Set of Fission Gas Gap Release Fractions for High Burnup Fuel Rods That Exceed the Linear Heat Generation Rate Limit Detailed in Regulatory Guide 1.183, Table 3,.2024-09-27027 September 2024 License Amendment Request Proposing a New Set of Fission Gas Gap Release Fractions for High Burnup Fuel Rods That Exceed the Linear Heat Generation Rate Limit Detailed in Regulatory Guide 1.183, Table 3,. NL-24-0349, Units 1 and 2 - 10 CFR 26.719(c)(1) 30-Day Report Blind Performance Test Results Inconsistent with Sample Provided2024-09-20020 September 2024 Units 1 and 2 - 10 CFR 26.719(c)(1) 30-Day Report Blind Performance Test Results Inconsistent with Sample Provided ML24256A0282024-09-12012 September 2024 2024 Hatch Requal Inspection Corporate Notification Letter NL-23-0930, Application to Revise Technical Specifications to Adopt TSTF-591, Revise Risk Informed Completion Time (RICT) Program2024-09-11011 September 2024 Application to Revise Technical Specifications to Adopt TSTF-591, Revise Risk Informed Completion Time (RICT) Program IR 05000348/20244012024-09-10010 September 2024 Security Baseline Inspection Report 05000348-2024401 and 05000364-2024401 NL-24-0341, Response to Request for Additional Information Related to the Application to Revise Technical Specifications Regarding Change to Containment Spray Nozzle Test Frequency2024-09-10010 September 2024 Response to Request for Additional Information Related to the Application to Revise Technical Specifications Regarding Change to Containment Spray Nozzle Test Frequency ML24243A0072024-09-10010 September 2024 – Correction of Amendment Nos. 223 and 206 Regarding Revision to Technical Specifications to Adopt TSTF-339-A, Relocate Technical Specification Parameters to the COLR Consistent with WCAP-14483 ML24102A2642024-09-0909 September 2024 – Exemption Request Regarding Final Safety Analysis Report Update Schedule (EPID L-2024-LLE-0013) - Letter NL-24-0337, Interim 10 CFR 21.21(a)(2) Report Regarding Operation Technology, Inc., ETAP Software Error in Transient Stability Program2024-09-0909 September 2024 Interim 10 CFR 21.21(a)(2) Report Regarding Operation Technology, Inc., ETAP Software Error in Transient Stability Program ML24249A2942024-09-0606 September 2024 Correction of Amendment Nos. 218 and 201 Regarding Revision to Technical Specifications to Use Online Monitoring Methodology 05200025/LER-2024-002, (Vegp), Unit 3, Manual Reactor Protection System and Automatic Safeguards Actuation Due to an Unexpected Change in Position of a Main Feedwater Pump Minimum Flow Control Valve2024-09-0505 September 2024 (Vegp), Unit 3, Manual Reactor Protection System and Automatic Safeguards Actuation Due to an Unexpected Change in Position of a Main Feedwater Pump Minimum Flow Control Valve ML24247A1102024-09-0505 September 2024 Corporate Notification Letter Aka 210-day Letter NUREG Rev 12 NL-24-0259, License Amendment Request to Revise Technical Specification 3.4.14, Reactor Coolant System Pressure Isolation Valve Leakage, Surveillance Requirement 3.4.14.3 Acceptance Criteria and Miscellaneous Obsolete Changes2024-09-0404 September 2024 License Amendment Request to Revise Technical Specification 3.4.14, Reactor Coolant System Pressure Isolation Valve Leakage, Surveillance Requirement 3.4.14.3 Acceptance Criteria and Miscellaneous Obsolete Changes NL-24-0340, Unit 1 - Inservice Inspection Program Owners Activity Report (OAR-1) for Outage 1 R322024-09-0404 September 2024 Unit 1 - Inservice Inspection Program Owners Activity Report (OAR-1) for Outage 1 R32 ML24249A1362024-09-0404 September 2024 EN 57304 - Westinghouse Electric Company, LLC, Final Report - No Embedded Files. Notification of the Potential Existence of Defects Pursuant to 10 CFR Part 21 NL-24-0334, 0 to the Updated Final Safety Analysis Report, Technical Specifications Bases Changes, Technical Requirements Manual Changes, License Renewal 10 CFR 54 .37(b) Changes, 10 CFR 50.59 Summary Report & Revised Nrc2024-09-0303 September 2024 0 to the Updated Final Safety Analysis Report, Technical Specifications Bases Changes, Technical Requirements Manual Changes, License Renewal 10 CFR 54 .37(b) Changes, 10 CFR 50.59 Summary Report & Revised Nrc ML24242A1332024-08-29029 August 2024 Issuance of Amendment Nos. 250 and 247, Regarding License Amendment Request to Revise Technical Specification 3.6.5, Containment Air Temperature, Actions (EPID L-2024-LLA-0098) - Non-Proprietary ML24233A0022024-08-27027 August 2024 Request for Withholding Information from Public Disclosure for Joseph M. Farley Nuclear Plant, Units 1 and 2, License Amendment Request Supplement to Change Technical Specification 3.6.5, Containment Air Temperature Actions ML24240A0812024-08-27027 August 2024 License Amendment Request to Change Technical Specification 3.6.5, Containment Air Temperature Actions - Revised Completion Time IR 05000321/20240912024-08-27027 August 2024 NRC Investigation Report 2-2023-003 and NOV - NRC Inspection Report 05000321/2024091 and 05000366/2024091 IR 05000321/20240052024-08-26026 August 2024 Updated Inspection Plan for Edwin I. Hatch Nuclear Plant, Units 1 and 2 - Report 05000321/2024005 and 05000366/2024005 IR 05000348/20244022024-08-26026 August 2024 Information Request for the Cyber Security Baseline Inspection, Notification to Perform Inspection 05000348/2024402 and 05000364/2024402 IR 05000348/20240052024-08-26026 August 2024 Updated Inspection Plan for Joseph M. Farley Nuclear Plant, Units 1 and 2 - Report 05000348/2024005 and 05000364/2024005 IR 05000424/20240052024-08-26026 August 2024 Updated Inspection Plan for Vogtle Electric Generating Plant, Units 1 and 2 - Report 05000424/2024005 and 05000425/2024005 NL-24-0313, Application to Revise Technical Specifications Surveillance Requirements to Increase Safety/Relief Valves Setpoint Response to Request for Additional Information2024-08-23023 August 2024 Application to Revise Technical Specifications Surveillance Requirements to Increase Safety/Relief Valves Setpoint Response to Request for Additional Information ML24235A1952024-08-22022 August 2024 Updated Inspection Plan for Vogtle Electric Generating Plant, Units 3 and 4 - Report 05200025/2024005 and 05200026/2024005 ML24226B2112024-08-22022 August 2024 Regulatory Audit Summary in Support of License Amendment Requests to Revise Technical Specification 3.6.5, Containment Air Temperature, Actions NL-24-0321, License Amendment Request to Change Technical Specification 3.6.5, Containment Air Temperature Actions - Supplemental Information2024-08-16016 August 2024 License Amendment Request to Change Technical Specification 3.6.5, Containment Air Temperature Actions - Supplemental Information IR 05000424/20244012024-08-15015 August 2024 4 - Security Baseline Inspection Report 05000424-2024401, 05000425-2024401, 05200025-2024402, and 05200026-2024403 - Cover Letter NL-24-0299, Exemption Request: Final Safety Analysis Report Update Schedule, Response to Request for Additional Information2024-08-14014 August 2024 Exemption Request: Final Safety Analysis Report Update Schedule, Response to Request for Additional Information IR 05000348/20240022024-08-12012 August 2024 – Integrated Inspection Report 05000348-2024002 and 05000364-2024002 and Exercise of Enforcement Discretion 05000425/LER-2024-001, (Vegp), Unit 2, Manual Actuation of the Reactor Protection System Due to a Rod Control Fuse Opening Causing a Misaligned Shutdown Rod2024-08-0909 August 2024 (Vegp), Unit 2, Manual Actuation of the Reactor Protection System Due to a Rod Control Fuse Opening Causing a Misaligned Shutdown Rod IR 05000321/20240022024-08-0808 August 2024 Edwin I Hatch Nuclear Plants, Units 1 and 2 – Integrated Inspection Report 05000321-2024002 and 05000366-2024002 ML24218A1842024-08-0707 August 2024 Examination Report and Cover Letter ML24215A3772024-08-0707 August 2024 2024 Farley Requal Inspection Corporate Notification Letter 05200026/LER-2024-001, (Vegp), Unit 4, Manual Reactor Protection System Actuation Due to Procedure Not Optimally Sequenced to Reset the Rapid Power Reduction Signal2024-08-0606 August 2024 (Vegp), Unit 4, Manual Reactor Protection System Actuation Due to Procedure Not Optimally Sequenced to Reset the Rapid Power Reduction Signal ML24212A1442024-08-0101 August 2024 Integrated Inspection Report 05200025/2024002 and 05200026/2024002 ML24201A2032024-08-0101 August 2024 Request for Withholding Information from Public Disclosure for Joseph M. Farley Nuclear Plant, Units 1 and 2, License Amendment Request to Change Technical Specification 3.6.5, Containment Air Temperature Actions IR 05000424/20240022024-07-29029 July 2024 Integrated Inspection Report 05000424/2024002 and 05000425/2024002 IR 05000424/20244042024-07-26026 July 2024 Material Control and Accounting Program Inspection Report 05000424/2024404 and 05000425/2024404 (Cover Letter) NL-24-0276, Post-Audit Supplement to License Amendment Request to Revise Renewed Facility Operating Licenses to Adopt an Alternative Seismic Method for Categorization of Structures, Systems, and Components2024-07-26026 July 2024 Post-Audit Supplement to License Amendment Request to Revise Renewed Facility Operating Licenses to Adopt an Alternative Seismic Method for Categorization of Structures, Systems, and Components NL-24-0290, Response to Request for Additional Information Related to Request for Specific Exemption2024-07-26026 July 2024 Response to Request for Additional Information Related to Request for Specific Exemption NL-24-0282, License Amendment Request and Exemption Request: Remove Tier 1 and Tier 2* Requirements2024-07-25025 July 2024 License Amendment Request and Exemption Request: Remove Tier 1 and Tier 2* Requirements NL-24-0126, – Units 3 and 4, License Amendment Request: Changes to Technical Specification 3.7.6, Main Control Room Emergency Habitability System (Ves) Action a and SR 3.7.6.62024-07-25025 July 2024 – Units 3 and 4, License Amendment Request: Changes to Technical Specification 3.7.6, Main Control Room Emergency Habitability System (Ves) Action a and SR 3.7.6.6 ML24200A1392024-07-25025 July 2024 Regulatory Audit in Support of Review of the License Amendment Request to Revise Technical Specification 3.6.5, Containment Air Temperature ML24199A2072024-07-24024 July 2024 TS 3-6-5 LAR - Individual Notice Transmittal Letter and NSHC - Rev 1 (1) - Letter ML24204A0722024-07-23023 July 2024 Issuance of Amendment No. 225, Regarding LAR to Revise TS 3.7.9 for a one-time Change to Support Nuclear Service Cooling Water Transfer Pump Repairs - Emergency Circumstances NL-24-0286, Emergency Request to Revise Technical Specification 3.7.9 for a One-Time Change to Support a Unit 1 Nuclear Service Cooling Water Transfer Pump Repair2024-07-20020 July 2024 Emergency Request to Revise Technical Specification 3.7.9 for a One-Time Change to Support a Unit 1 Nuclear Service Cooling Water Transfer Pump Repair ML24191A4562024-07-19019 July 2024 Request for Relief and Alternative Requirements for Squib (Explosively Actuated) Valves First Test Interval 2024-09-09
[Table view] Category:Request for Additional Information (RAI)
MONTHYEARML24227A0512024-08-14014 August 2024 August 14, 2024 - Request for Additional Information - Farley, Units 1 and 2 - Proposed LAR to Revise TS SR 3.6.6.8 Frequency ML24208A1742024-07-26026 July 2024 Request for Additional Information Regarding License Amendment Request to Revise TS SRs (3.4.3.1 & 3.1.7.7) to Increase S/Rv Setpoints ML24211A0162024-07-26026 July 2024 NRR E-mail Capture - Request for Additional Information - Hatch, Units 1 and 2, Revise TS SRs (3.4.3.1 & 3.1.7.7) to Increase SRV Setpoints LAR ML24199A1592024-07-17017 July 2024 NRR E-mail Capture - Request for Additional Information - Vogtle 3 and 4 - Exemption for the Requirements in 10 CFR 50.71 Pertaining to the Submittal of Updated Final Safety Analysis Report ML24193A1182024-07-10010 July 2024 Email to SNC with RAI for Hatch Exemption Request ML24179A1242024-06-27027 June 2024 ISFSI Request for Information (2024) ML24143A0412024-05-28028 May 2024 Supplemental Information Needed for Using the Risk-Informed Process for Evaluation for the LAR to Change Technical Specification 3.6.5, Containment Air Temperature, Actions ML24100A7842024-04-0909 April 2024 NRR E-mail Capture - for Your Action - Request for Additional Information (RAI) - Vogtle, Units 3 and 4 - Alternative Request for Explosively Actuated Valves (L-2023-LLR-0016) ML24072A3982024-03-12012 March 2024 NRR E-mail Capture - for Your Action - Second Round Request for Additional Information (RAI) - Vogtle, Unit 1 - SG Tube Inspection Report - 1R24 (L-2023-LRO-0067) ML24037A1362024-02-0606 February 2024 RP DLR Feb. 2024 ML24037A1352024-02-0505 February 2024 e-mail ML23341A2042024-01-12012 January 2024 Request for Additional Information Exemption Requests for Physical Barriers (EPID L-2023-LLE-0018 & L-2023-LLE-0021) ML23354A2032023-12-18018 December 2023 Document Request for Hatch Nuclear Plant - Radiation Protection Inspection - Inspection Report 2024-01 ML23342A0802023-12-0808 December 2023 NRR E-mail Capture - Request for Additional Information (RAI) - Vogtle, Unit 1 - Review of SG Tube Inspection Report for Refueling Outage 24 (L-2023-LRO-0067) ML23279A2082023-10-0505 October 2023 Issuance of Formal RAIs - Vogtle, Units 1 and 2 - Proposed LAR and Proposed Alternative Request to Revise TS 3.4.14.1 and IST ALT-VR-02 (EPIDs L-2023-LLA-0061 and L-2023-LLR-0023) ML23250A0472023-09-20020 September 2023 Request for Additional Information Regarding License Amendment Request to Relax Required Number of Fully Tensioned Reactor Pressure Vessel Head Closure Bolts in Technical Specifications Table 1.1-1, Modes ML23257A2092023-09-14014 September 2023 NRR E-mail Capture - Formal Issuance of 2nd Round RAIs for Surry Units 1&2 and North Anna Units 1&2 Emergency Plans LAR ML23264A0142023-09-14014 September 2023 NRR E-mail Capture - (External_Sender) Draft Round-2 RAI - Hatch, Units 1 and 2, Revise TS 1.1-1 Modes LAR ML23248A3482023-09-0505 September 2023 NRR E-mail Capture - for Your Action - Request for Additional Information (RAI) 6 - Vogtle - TSTF-339 LAR (L-2023-LLA-0053) ML23243A9862023-08-31031 August 2023 NRR E-mail Capture - Draft RAIs for EP Staff Augmentation Times LAR (L-2022-LLA-0166) ML23243A9952023-08-31031 August 2023 Request for Baseline RP Inspection ML23236A0022023-08-22022 August 2023 NRR E-mail Capture - Request for Additional Information - Farley, Units 1&2, Emergency TS 3.6.5 LAR ML23188A1512023-08-0909 August 2023 Round 2 RAIs for LAR 22-002 TS 3.8.3 Inverters-Operating, Completion Time Extension ML23200A0112023-07-18018 July 2023 Document Request for Vogtle Unit 3 RP Inspection ML23198A1552023-07-17017 July 2023 NRR E-mail Capture - for Your Action - Request for Additional Information (RAI) - Hatch, Farley, and Vogtle, Units 1 and 2 Quality Assurance Topical Report (QATR) Submittal Dated June 15, 2023 ML23193A7832023-07-12012 July 2023 NRR E-mail Capture - for Your Action - Request for Additional Information (RAI) - Vogtle - TSTF-339 LAR (L-2023-LLA-0053) ML23095A0832023-04-0505 April 2023 NRR E-mail Capture - for Your Action - RAI - Farley - Containment Isolation Valves, Surveillance Requirement 3.6.3.5 LAR (L-2022-LLA-0189) ML23086A0232023-03-24024 March 2023 NRR E-mail Capture - for Your Action - Draft RAIs - Farley Surveillance Requirement (SR) 3.6.3.5 License Amendment Request (LAR) (L-2022-LLA-0189) ML23065A0612023-03-0303 March 2023 NRR E-mail Capture - for Your Action - Request for Additional Information (RAI) 14 - Vogtle - AST, TSTF-51, TSTF-471, and TSTF-490 LAR (L-2022-LLA-0096) ML23018A1872023-01-17017 January 2023 2023 HNP CGD Inspection Information Request ML23006A0882023-01-0606 January 2023 NRR E-mail Capture - for Your Action - Request for Additional Information (RAI) - Vogtle - Accident Source Term (Ast), TSTF-51, TSTF-471, and TSTF-490 LAR (L-2022-LLA-0096) ML23003A8092023-01-0303 January 2023 NRR E-mail Capture - for Your Action - RAI - Farley - ISI Alternative FNP-ISI-ALT-05-05 (L-2022-LLR-0068) ML22355A2082022-12-21021 December 2022 NRR E-mail Capture - RAI - Hatch, Units 1 and 2, Reactor Pressure Vessel 'Rpv Head Studs' LAR ML22348A0332022-12-13013 December 2022 NRR E-mail Capture - for Your Action - RAI - Vogtle, Unit 2 - Steam Generator Tube Inspection Report (L-2022-LRO-0120) ML22334A1482022-11-30030 November 2022 NRR E-mail Capture - for Your Action - RAI - Farley - TS 3.4.10 LAR, Psv Setpoint (L-2022-LLA-0098) ML23026A2372022-11-16016 November 2022 2023001 Hatch RP RFI Final ML22192A1042022-08-0101 August 2022 Acceptance of Requested Licensing Action Amendment Request Application to Allow Use of Lead Test Assemblies for Accident Tolerant Fuel with Request for Additional Information ML22208A1332022-07-26026 July 2022 NRR E-mail Capture - RAI - Hatch, Units 1 and 2, TSTF-208 LAR ML22157A0902022-06-0606 June 2022 NRR E-mail Capture - RAIs - Vogtle, Unit 1 - Refueling Outage (RFO) 1R23 Steam Generator (SG) Tube Inspection Report ML22157A3542022-06-0606 June 2022 NRR E-mail Capture - RAI - Hatch, Units 1 and 2, TSTF-505 LAR ML22140A1192022-05-20020 May 2022 NRR E-mail Capture - RAIs - Hatch, Units 1 and 2, TSTF-505 LAR ML22123A1802022-05-0303 May 2022 NRR E-mail Capture - Correction - RAIs for Farley LAR Re. TS 5.5.17 Containment Leakage Rate Testing Program ML22123A1782022-05-0303 May 2022 NRR E-mail Capture - RAIs for Farley LAR Re. TS 5.5.17 Containment Leakage Rate Testing Program ML22112A0892022-04-22022 April 2022 NRR E-mail Capture - Draft RAIs for Farley LAR Re. TS 5.5.17 ML22104A1312022-04-14014 April 2022 NRR E-mail Capture - Request for Additional Information - Farley and Vogtle - Relocate Piping Inspection License Amendment Request (L-2021-LLA-0235) ML22073A0842022-03-21021 March 2022 an NRC Fire Protection Team Inspection (NRC Inspection Report Nos. 05000321/2022011 and 05000366/2022011) and Request for Information ML22026A3942022-01-26026 January 2022 NRR E-mail Capture - Request for Additional Information - Vogtle, Units 1 and 2, TS 3.7.2 LAR ML22025A2142022-01-21021 January 2022 Plant Hatch 2022001 RP Baseline Inspection Information Request ML21350A1032021-12-16016 December 2021 NRR E-mail Capture - Request for Additional Information - Vogtle, Units 1 and 2, TS 3.7.2 LAR ML21321A3772021-11-16016 November 2021 NRR E-mail Capture - RAIs for Farley LAR Sump Recirculation Valve Encapsulation Vessel Removal 2024-08-14
[Table view] |
Text
UNITED NUCLEAR REGULATORY WASHINGTON, D.C. 20555-0001 February 25, 2011 Mr. M. J. Ajluni Nuclear Licensing Director Southern Nuclear Operating Company, Inc. 40 Inverness Center Parkway Post Office Box 1295, Bin -038 Birmingham, AL 35201-1295 JOSEPH M. FARLEY NUCLEAR PLANT, UNITS 1 AND 2; EDWIN I. HATCH NUCLEAR PLANT, UNIT NOS. 1 AND 2; VOGTLE ELECTRIC GENERATING PLANT, UNITS 1 AND 2-REQUEST FOR ADDITIONAL INFORMATION ON CYBER SECURITY PROGRAM (TAC NOS. ME4356, ME4357, FARLEY; ME4358, ME4359, HATCH; AND ME4360, ME4361, VOGTLE)
Dear Mr. Ajluni:
By letter dated July 16, 2010 (Agencywide Documents Access and Management System (ADAMS), Accession No. ML 102000158), Southern Nuclear Operating Company, Inc. (SNC), submitted license amendment requests for U.S. Nuclear Regulatory Commission (NRC) review and approval of the facility cyber security program (CSPs) and proposed implementation schedules for the plants named above. The NRC staff has determined that additional information is required to address the issues of records retention, implementation schedules and the scoping of systems in the CSPs, as discussed in further detail in the Enclosure.
The NRC staff has determined that no security-related or proprietary information is contained therein. We understand that the Nuclear Energy Institute and the industry Cyber Security Task Force are working to ensure that operating reactor licensees will submit consistent responses to the NRC for these generic RAls. The NRC staff believes that consistency in the implementation of NRC regulations across the licensed power reactor fleet supports the protection of the public health and safety.
M. Ajluni We request that a response be provided within 30 days of the date of this Sincerely, /t6-+{1, r))Robert E. Martin, Senior Project Plant Licensing Branch Division of Operating Reactor Office of Nuclear Reactor Docket Nos. 50-348, 50-364, 50-366, 50-424, and
Enclosure:
RAI cc w/encl: Distribution via Listserv REQUEST FOR ADDITIONAL INFORMATION REGARDING THE LICENSE AMENDMENT REQUEST TO IMPLEMENT A CYBER SECURITY PROGRAM AT SOUTHERN NUCLEAR OPERATING COMPANY, INC. (SNC)' PLANTS JOSEPH M. FARLEY NUCLEAR PLANT, UNITS 1 AND 2 EDWIN I. HATCH NUCLEAR PLANT, UNIT NOS. 1 AND 2 VOGTLE ELECTRIC GENERATING PLANT, UNITS 1 AND 2 DOCKET NOS. 50-348, 50-364, 50-321, 50-366, 50-424, AND 50-425 RAt 1: Records Retention Title 10 of the Code of Federal Regulations (10 CFR), Part 73, Paragraph 73.54(c)(2) requires licensees to design a cyber security program (CSP) to ensure the capability to detect, respond to, and recover from cyber attacks. Furthermore, 10 CFR 73.54(e)(2)(i) requires licensees to maintain a CSP that describes how the licensee will maintain the capability for timely detection and response to cyber attacks. The ability for a licensee to detect and respond to cyber attacks requires accurate and complete records and is further supported by 10 CFR 73.54(h), which states that the licensee shall retain all records and supporting technical documentation required to satisfy the requirements of 10 CFR 73.54 as a record until the Commission terminates the license for which the records were developed, and shall maintain superseded portions of these records for at least 3 years after the record is superseded, unless otherwise specified by the Commission.
The licensee's CSP in Section 4.13 states that critical digital asset (CDA) audit records and audit data (e.g., operating system logs, network device logs) are retained for a period oftime that is less than what is required by 10 CFR 73.54(h).
Explain the deviation from the 10 CFR 73.54(h) requirement to retain records and supporting technical documentation until the Commission terminates the license (or to maintain superseded portions of these records for at least 3 years) and how that meets the requirements of 10 CFR 73.54. RAI 2: Implementation Schedule The regulation at 10 CFR 73.54, "Protection of digital computer and communication systems and networks," requires licensees to submit a CSP that satisfies the requirements of this section for Commission review and approval.
Furthermore, each submittal must include a proposed implementation schedule and the implementation of the licensee's cyber security program must be consistent with the approved schedule.
Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat. Enclosure
-2 The completion of several key intermediate milestones (Items (a) through (g) below) would demonstrate progress toward meeting the requirements of 10 CFR 73.54. The Nuclear Regulatory Commission (NRC) staff's expectation is that the key intermediate milestones will be completed in a timely manner, but no later than December 31,2012. The key CSP implementation milestones are as follows: (a) Establish, train and qualify a Cyber Security Assessment Team, as described in Section 3.1.2, "Cyber Security Assessment Team," of the CSP. (b) Identify Critical Systems and CDAs, as described in Section 3.1.3, "Identification of Critical Digital Assets," of the CSP. (c) Implement cyber security defense-in-depth architecture by installation of, for example, deterministic one-way devices, as described in Section 4.3, In-Depth Protective Strategies" of the CSP. (d) Implement the management, operational and technical cyber security controls that address attacks promulgated by use of portable media, portable devices, and portable equipment as described in Appendix D, Section 1.19, "Access Control for Portable and Mobile Devices," of Nuclear Energy Institute (NEI) 08-09, Revision 6. (e) Implement observation and identification of obvious cyber related tampering to existing insider mitigation rounds as described in Appendix E, Section 4.3, "Personnel Performing Maintenance and Testing Activities," and Appendix E Section 10.3, "Baseline Configuration," of NEI 08-09, Revision 6. Identify, document, and implement cyber security controls to phYSical security target set CDAs in accordance with Section 3.1.6, "Mitigation of Vulnerabilities and Application of Cyber Security Controls," of the CSP. (g) Ongoing monitoring and assessment activities will commence for those target set CDAs whose security controls have been implemented, as described in Section 4.4, "Ongoing Monitoring and Assessment," of the CSP (h) Full implementation of the CSP for all safety, security, and emergency preparedness functions.
Provide a revised CSP implementation schedule that identifies the appropriate milestones, completion dates, supporting rationale, and level of detail to allow the NRC to evaluate the licensee's proposed schedule and associated milestone dates which include the final completion date. It is the NRC's intention to develop a license condition incorporating your revised CSP implementation schedule containing the key milestone dates.
-RAI 3: Scope of Systems Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat as described in 10 CFR 73.1. In addition, 10 CFR 73.54(a)(1) states that the licensee shall protect digital computer and communication systems and networks associated with: (i) Safety-related and important-to-safety functions; (ii) Security functions; (iii) Emergency preparedness functions, including offsite communications; and (iv) Support systems and equipment which, if compromised, would adversely impact safety, security, or emergency preparedness functions.
Subsequent to the issuance of the cyber security rule, the NRC stated that 10 CFR 73.54 should be interpreted to include structures, systems, and components (SSCs) in the balance of plant (BOP) that have a nexus to radiological health and safety (Agencywide Documents Access and Management System (ADAMS) Accession No. ML 103490344, dated November 19, 2010). The SSCs in the BOP are those that could directly or indirectly affect reactivity of a nuclear power plant and could result in an unplanned reactor shutdown or transient and are therefore within the scope of important-to-safety functions described in 10 CFR 73.54(a)(1).
Furthermore, the NRC issued a letter to NEI dated January 5,2011 (ADAMS Accession No. ML 103550480), that provided licensees with additional guidance on one acceptable approach to comply with the Commission's policy determination.
Explain how the scoping of systems provided by the licensee's CSP meets the requirements of 10 CFR 73.54 and the additional guidance provided by the NRC.
M. Ajluni -2 We request that a response be provided within 30 days of the date of this letter. Sincerely, IRA! Robert E. Martin, Senior Project Manager Plant Licensing Branch 11-1 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-348, 50-364, 50-321, 50-366, 50-424, and 50-425
Enclosure:
RAI cc w/encl: Distribution via Listserv DISTRIBUTION PUBLIC LPL2-1 RtF RidsNrrDorlLpl2-1 Resource RidsAcrsAcnw_MailCTR Resource RidsNrrDoriDpr Resource RidsRgn2MailCenter Resource RidsNrrLAMOBrien Resource RidsOgcRp Resource PPederson, NSIR CErlanger, NSIR RidsNrrPMFarley Resource RidsNrrPMHatch Resource RidsNrrPMVogtle Resource ADAMS Accession No.: ML110540461 NSIRtDSP/BC NAME n MO'Brien OFFICE -1/PM LPL2-1/LA CErlanger*
DATE 02/24/11 2/18111 OFFICIAL RECORD COPY *b LPL2-lIBC GKulesa (JStang for) 02125/11