Letter Sequence RAI |
---|
TAC:ME4319, (Approved, Closed) TAC:ME4320, (Approved, Closed) TAC:ME4321, (Approved, Closed) TAC:ME4322, (Approved, Closed) TAC:ME4323, (Approved, Closed) TAC:ME4324, (Approved, Closed) TAC:ME4325, (Approved, Closed) |
|
MONTHYEARML1020100912010-07-12012 July 2010 Units 2 & 3 and North Anna & Surry, Units 1 & 2 - Supplement to Request for Approval of the Cyber Security Plan Project stage: Supplement ML1021602322010-07-29029 July 2010 Regarding ME4319-25, Dominion Fleet Cyber Security Plan Amendment Submittals, with the Addition of ML101900201, Guidance on Implementation Schedule Project stage: Other ML1021602272010-07-29029 July 2010 Regarding ME4319-25, Dominion Fleet Cyber Security Plan Amendment Submittals Project stage: Other ML1021602022010-07-29029 July 2010 ME4319-25 - Dominion Acceptance Conference Call Project stage: Other ML1022102842010-08-0505 August 2010 Supplement to Request for Approval of the Cyber Security Plan Project stage: Supplement ML1026706412010-09-23023 September 2010 Notification Letter Designating Balance of Plant Systems within the Cyber Security Rule Scope Project stage: Request ML1031604222010-11-10010 November 2010 Scope of Systems Clarification Project stage: Request ML1032703572010-11-22022 November 2010 Fleet (Kewaunee, Millstone 2 & 3, North Anna 1 & 2, Surry 1 & 2) Nuclear Plants Email - Cyber Security Plan (License Amendment (TAC No. ME4319, ME4320,4321, ME4322, 4323, and ME4324, 4325) Project stage: Other ML1035600832010-12-13013 December 2010 Response to Request for Additional Information on Cyber Security Plan Project stage: Response to RAI ML1106303592011-03-0707 March 2011 Request for Additional Information Related to License Amendment Request for Approval of Cyber Security Plan Project stage: RAI ML1109606652011-04-0404 April 2011 Cyber Security Plan, Response to Request for Additional Information Project stage: Response to RAI ML11143A0632011-05-17017 May 2011 Submittal of Consolidated Cyber Security Plan and RAI Response Project stage: Other ML11200A2222011-07-19019 July 2011 NRR E-mail Capture - ME4319 - Pertaining to Kewaunee Power Station - State Consultation Project stage: Other ML11222A0832011-08-0404 August 2011 Cyber Security Plan License Condition Project stage: Other ML11192A2492011-08-31031 August 2011 Issuance of Amendment Regarding Cyber Security to Dominion Plants Project stage: Approval ML1120310832011-09-30030 September 2011 Issuance of Amendments Cyber Security Plan Project stage: Approval 2010-09-23
[Table View] |
Request for Additional Information Related to License Amendment Request for Approval of Cyber Security PlanML110630359 |
Person / Time |
---|
Site: |
Millstone, Kewaunee, Surry, North Anna ![Dominion icon.png](/w/images/b/b0/Dominion_icon.png) |
---|
Issue date: |
03/07/2011 |
---|
From: |
Feintuch K D Plant Licensing Branch III |
---|
To: |
Heacock D A Dominion Energy Kewaunee, Dominion Nuclear Connecticut, Dominion Nuclear North Anna |
---|
Feintuch K D, NRR/DORL/LPL3-1, 415-3079 |
References |
---|
TAC ME4319, TAC ME4320, TAC ME4321, TAC ME4322, TAC ME4323, TAC ME4324, TAC ME4325, FOIA/PA-2011-0115 |
Download: ML110630359 (6) |
|
|
---|
Category:Request for Additional Information (RAI)
MONTHYEARML24213A2602024-07-31031 July 2024 Request for Additional Information LAR to Support Implementation of Framatome Gaia Fuel IR 05000336/20244032024-07-22022 July 2024 Information Request for the Cybersecurity Baseline Inspection, Notification to Perform Inspection 05000336/2024403 and 05000423/2024403 IR 05000280/20244032024-05-22022 May 2024 Information Request for the Cyber Security Baseline Inspection, Notification to Perform Inspection 05000280/2024403 and 05000281- 2024403 ML24113A2502024-04-22022 April 2024 Request for Additional Information (e-mail 4/22/2024) License Renewal Commitment for Aging Management Program of Alloy 600 Components ML24102A0682024-04-10010 April 2024 IST (z)(2) Hardship RR V-1 RCS Cold Leg, Lh Safety Injection Check Valves ML24087A0112024-03-23023 March 2024 NRR E-mail Capture - Draft RAIs for Reactor Coolant Pump (RCP) Relief Request (L-2024-LLR-0022) ML23318A0952023-11-14014 November 2023 Request for Additional Information (E-mail Dated 11/14/2023) LAR to Revise TSs Related to Framatome Gaia Fuel ML23318A1172023-11-13013 November 2023 NRR E-mail Capture - Formal Issuance of RAIs for North Anna Technical Support Center (TSC) License Amendment Request (LAR) (L-2023-LLA-0006) ML23268A4362023-09-21021 September 2023 Extension Date Approval for Request for Additional Information for Exemptions on Site Restoration Activities ML23257A2092023-09-14014 September 2023 NRR E-mail Capture - Formal Issuance of 2nd Round RAIs for Surry Units 1&2 and North Anna Units 1&2 Emergency Plans LAR ML23243A9862023-08-31031 August 2023 NRR E-mail Capture - Draft RAIs for EP Staff Augmentation Times LAR (L-2022-LLA-0166) ML23222A1532023-08-29029 August 2023 Solutions Restore Enclosure RAI 1 - Final ML23219A1602023-08-0707 August 2023 003 Radiation Safety Baseline Inspection Information Request ML23199A2832023-07-18018 July 2023 Request for Additional Information (E-mail Dated 7/18/2023) LAR to Revise the Pressure-Temperature Limits ML23187A1122023-07-0606 July 2023 TSC Relocation LAR RAIs ML23171B0522023-06-20020 June 2023 NRR E-mail Capture - RAI for Review of Appendix F to DOM-NAF-2-P (Redacted) ML23081A5282023-04-26026 April 2023 Request for Additional Information - North Anna Subsequent License Renewal Application Environmental Review ML23089A1882023-03-29029 March 2023 Request for Additional Information (E-mail Dated 3/29/2023) Spring 2022 Steam Generator Tube Inspection Report ML23075A0232023-03-15015 March 2023 NRR E-mail Capture - RAI - License Amend Req (LAR) to Revise Tech Spec (Ts) 3.6.8 Limiting Condition for Operation to Remove Refueling Water Chemical Addition Tank and Replace the Containment Sump Buffer North Anna, 1 and 2 (L-2022-LLA-0162 ML23073A1802023-03-14014 March 2023 Notification of Commercial Grade Dedication Inspection (05000336/2023010 and 05000423/2023010) and Request for Information ML23068A0242023-03-0808 March 2023 RAI Issuance Fuel Handling Trolley LAR ML23060A0932023-03-0101 March 2023 NRR E-mail Capture - Formal Issuance of RAIs for Surry/North Anna Emergency Plans LAR ML23059A2282023-02-28028 February 2023 NRR E-mail Capture - Draft RAIs for Containment Buffer Change to Natb (L-2022-LLA-0162) ML23054A2412023-02-23023 February 2023 NRR E-mail Capture - Formal Issuance of RAIs for Surry Turbine Building Tornado Reclassification ML23046A1172023-02-0202 February 2023 002 Radiation Safety Baseline Inspection Information Request ML23018A1642023-01-17017 January 2023 Formal Issuance of RAIs for Surry ISI Alternative for SG Welds, 30 Day Calendar Response Period (Email) ML22349A2102022-12-15015 December 2022 Formal 43-day Request for Additional Information Issuance for Surry Turbine Building License Amendment Request ML22339A1582022-11-30030 November 2022 Requalification Inspection Notification Letter ML22258A2202022-09-13013 September 2022 FFD RFI ML22251A1292022-09-0909 September 2022 Request for Additional Information Related to Response to Generic Letter 2004-04 ML22242A0452022-08-23023 August 2022 NRR E-mail Capture - Dominion GL 04-02 Response Draft RAIs (L-2017-LRC-0000) ML22223A1192022-08-14014 August 2022 RP Inspection Document Request Letter Final ML22110A2052022-04-19019 April 2022 Formal Issuance of RAIs for Post LOCA Buffer Change LAR ML22083A2102022-03-24024 March 2022 NRR E-mail Capture - Draft RAI - Relief Request N2-14-LMT-003 Fourth Ten Year Inservice Inspection Interval ML22067A1622022-03-0909 March 2022 Notification of Inspection and Request for Information for NRC Problem Identification and Resolution Inspection ML22032A3252022-02-0202 February 2022 Enclosure - Request for Additional Information ML22012A0572022-01-11011 January 2022 Issuance of RAIs for Surry Unit 1, Spring 2021 Steam Generator Tube Inspection ML21327A3652021-11-23023 November 2021 NRR E-mail Capture - Draft RAI for TSTF-577 LAR ML21322A0962021-11-18018 November 2021 Final Request for Additional Information Set 5 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Email ML21322A0992021-11-18018 November 2021 Final Request for Additional Information Set 5 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Enclosure ML21257A0692021-09-30030 September 2021 Enclosure - Request for Additional Information - Application for Order Approving Transfer of Control of Kewaunee Power Station License and Conforming License Amendment ML21257A0682021-09-30030 September 2021 Request for Additional Information Regarding Application for Order Approving Transfer of Control of Kewaunee Power Station License and Conforming License Amendments ML21256A0672021-09-13013 September 2021 Final Request for Confirmation of Information Set 2 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Email ML21256A0692021-09-13013 September 2021 Final Request for Confirmation of Information Set 2 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Request for Confirmation of Information ML21238A0942021-08-25025 August 2021 Draft Request for Additional Information Set Z - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Email ML21238A0982021-08-25025 August 2021 Draft Request for Additional Information Set Z - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Enclosure ML21225A5022021-08-13013 August 2021 Request for Additional Information for North Anna Power Station, Units 1 and 2, Surry Power Station, Units 1 and 2, and Millstone Power Station, Units 2 and 3, Appendix E of Fleet Report Com-Naf-2 (EPID:L02021-LLT-0000) Public Version ML21196A1012021-07-15015 July 2021 Notification of an NRC Fire Protection Team Inspection (FPTI) (NRC Inspection Report 05000280/2021011 and 05000281/2021011) and Request for Information (RFI) ML21195A2442021-07-13013 July 2021 NRR E-mail Capture - Draft RAI Appendix E to Topical Report DOM-NAF-2 Qualification of the Framatome BWU-I CHF Correlation in the Dominion Energy VIPRE-D Computer Code ML21188A1652021-07-0707 July 2021 Final Request for Additional Information Set 4 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Enclosure 2024-07-31
[Table view] Category:Letter
MONTHYEARIR 05000336/20240022024-08-13013 August 2024 Integrated Inspection Report 05000336/2024002 and 05000423/2024002 ML24164A0012024-08-12012 August 2024 Proposed Alternative Relief Request V-1 Inservice Testing of Pressure Isolation Valves (EPID l-2023-LLR-0060) ML24221A1932024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Upper Mattaponi Tribe ML24221A1942024-08-0808 August 2024 Tribal Section 106 Letters-North Anna-United Keetoowah Band of Cherokee Indians in Oklahoma ML24221A1922024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Tuscarora Nation of New York ML24163A3002024-08-0808 August 2024 Request for Relief Request N1-I5-NDE-007 Inservice Inspection Alternative ML24206A0052024-08-0808 August 2024 SLR Final EIS Letter to Achp ML24206A0062024-08-0808 August 2024 Notice of Availability of the Final Environmental Impact Statement for the North Anna Nuclear Power Station Unit Numbers 1 and 2 Subsequent License Renewal (Docket Numbers: 50-338 and 50-339) ML24208A0142024-08-0808 August 2024 Tribal Section 106 Letters-North Anna-Absentee-Shawnee Tribe of Indians of Oklahoma ML24221A1812024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Catawba Indian Nation ML24221A1822024-08-0808 August 2024 Tribal Section 106 Letters - North Anna - Chickahominy Indian Tribe ML24221A1832024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Chickahominy Indian Tribe-Eastern Division ML24221A1842024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Delaware Nation, Oklahoma ML24221A1852024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Delaware Tribe of Indians ML24221A1872024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Eastern Shawnee Tribe of Oklahoma ML24221A1882024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Monacan Indian Nation ML24221A1862024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Eastern Band of Cherokee Indians ML24221A1912024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Rappahannock Tribe, Inc ML24221A1892024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Nansemond Indian Nation ML24221A1902024-08-0808 August 2024 Tribal Section 106 Letters-North Anna - Pamunkey Indian Tribe IR 05000336/20244412024-08-0606 August 2024 Supplemental Inspection Report 05000336/2024441 and 05000423/2024441 and Follow-Up Assessment Letter (Cover Letter Only) ML24212A0742024-08-0505 August 2024 Request for Withholding Information from Public Disclosure - Millstone Power Station, Unit No. 3, Proposed Alternative Request IR-4-13 to Support Steam Generator Channel Head Drain Modification IR 05000338/20240022024-08-0202 August 2024 Integrated Inspection Report 05000338/2024002 and 05000339/2024002 IR 05000280/20240022024-08-0101 August 2024 Integrated Inspection Report 05000280/2024002 and 05000281/2024002 ML24206A0432024-07-26026 July 2024 Feis - Letter to the Applicant ML24211A1712024-07-25025 July 2024 Associated Independent Spent Fuels Storage Installation, Revision to Emergency Plan - Report of Change ML24206A0902024-07-24024 July 2024 Owners Activity Report IR 05000336/20244032024-07-22022 July 2024 Information Request for the Cybersecurity Baseline Inspection, Notification to Perform Inspection 05000336/2024403 and 05000423/2024403 ML24165A1232024-07-17017 July 2024 Proposed Alternative Relief Request P-1, P-2 Inservice Testing of Residual Heat and Containment Spray Pumps (EPID l-2023-LLR-0058) ML24165A2782024-07-17017 July 2024 Issuance of Amendment Nos. 318 and 318, Reclassification of Regulatory Guide 1.97 Variable for Low Head Safety Injection ML24190A4192024-07-0808 July 2024 Inservice Testing (IST) Program for Pumps and Valves Revised Sixth IST Interval Start Date and Updated Technical Specifications References for Alternative Request V-1 ML24179A2932024-07-0101 July 2024 Notification of Inspection and Request for Information for NRC Problem Identification and Resolution Inspection IR 05000336/20245012024-07-0101 July 2024 Emergency Preparedness Biennial Exercise Inspection Report 05000336/2024501 and 05000423/2024501 ML24180A0932024-06-28028 June 2024 Readiness for Additional Inspection: EA-23-144 IR 05000336/20240102024-06-26026 June 2024 Biennial Problem Identification and Resolution Inspection Report 05000336/2024010 and 05000423/2024010 ML24178A2422024-06-25025 June 2024 2023 Annual Report of Emergency Core Cooling System (ECCS) Model, Changes Pursuant to the Requirements of 10 CFR 50.46 ML24177A2792024-06-20020 June 2024 Preparation and Scheduling of Operator Licensing Examinations ML24166A0622024-06-18018 June 2024 – Proposed Alternative Relief Request P-3, P-4 Inservice Testing of Boric Acid, Component Cooling Water Pumps ML24157A0542024-06-13013 June 2024 Audit Summary in Support of License Amendment Request for Proposed Reclassification of Low Head Safety Injection Flow Instrumentation Related to Regulatory Guide 1.97 ML24143A1622024-06-12012 June 2024 – Correction to Issuance of Amendment Nos. 297 and 280 and Surry Units 1 and 2, Correction to Issuance of Amendment Nos. 317 and 317, to Change Emergency Plan Staff Augmentation Times ML24170B0532024-06-10010 June 2024 DOM-NAF-2-P/NP-A, Revision 0.5, Reactor Core Thermal-Hydraulics Using the VIPRE-D Computer Code ML24165A1292024-06-0505 June 2024 ISFSI, 10 CFR 50.59 Annual Change Report for 2023 Annual Regulatory Commitment Change Report for 2023 ML24128A2772024-06-0404 June 2024 Issuance of Amendment No. 290 to Revise TSs for Reactor Core Safety Limits, Fuel Assemblies, and Core Operating Limits Report for Use of Framatome Gaia Fuel (EPID L-2023-LLA-0074) (Non-Proprietary) ML24151A6482024-06-0303 June 2024 Changes in Reactor Decommissioning Branch Project Management Assignments for Some Decommissioning Facilities IR 05000338/20240102024-05-24024 May 2024 NRC Fire Protection Team Inspection (FPTI) Report 05000338/2024010 and 05000339/2024010 IR 05000280/20244032024-05-22022 May 2024 Information Request for the Cyber Security Baseline Inspection, Notification to Perform Inspection 05000280/2024403 and 05000281- 2024403 ML24109A0032024-05-21021 May 2024 Issuance of Amendment No. 289 to Revise Technical Specifications to Use Framatome Loss of Coolant Accident Evaluation Methodologies for Establishing Core Operating Limit (EPID L-2023-LLA-0065) (Non-Proprietary) ML24110A0562024-05-21021 May 2024 Exemption from the Requirements of 10 CFR Part 50, Section 50.46, and Appendix K Regarding Use of M5 Cladding Material (EPID L-2023-LLE-0013) (Letter) ML24141A2432024-05-20020 May 2024 Response to Request for Additional Information Regarding Alloy 600 Aging Management Program Submittal Related to License Renewal Commitment No. 15 ML24142A0952024-05-20020 May 2024 End of Cycle 22 Steam Generator Tube Inspection Report 2024-08-08
[Table view] |
Text
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555*0001 March 7, 2011 Mr. David A. Heacock President and Chief Nuclear Officer Dominion Nuclear 5000 Dominion Blvd. Glen Allen, VA 23060-6711 KEWAUNEE POWER STATION, MILLSTONE POWER STATION UNITS 2 AND 3, NORTH ANNA POWER STATION UNITS 1 AND 2, SURRY POWER STATION UNITS 1 AND 2 -REQUEST FOR ADDITIONAL INFORMATION RELATED TO LICENSE AMENDMENT REQUEST FOR APPROVAL OF CYBER SECURITY PLAN (TAC NOS. ME4319, ME4320, ME4321, ME4322, ME4323, ME4324, AND ME4325)
Dear Mr. Heacock:
By letter to the U.S. Nuclear Regulatory Commission (NRC) dated November 20, 2009 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML093360247), as supplemented by letters dated July 12, 2010 (ADAMS Accession No. ML 102010091), August 5,2010 (ADAMS Accession No. ML 102210284), September 23, 2010 (ADAMS Accession No. ML 102670641), November 10,2010 (ADAMS Accession No. ML 103160422) and December 13,2010 (ADAMS Accession No. ML 103560083), Dominion Electric Kewaunee, Inc., Dominion Nuclear Connecticut, Inc., and Virginia Electric and Power Company (collectively, the Dominion licensees) submitted amendments requesting NRC approval of a common fleet Cyber Security Plan. The NRC staff is reviewing your submittal and has determined that additional information is required to complete the review. By monitored fax transmission on February 22, 2011, the draft Request for Additional Information (RAI) items were sent to Margaret Earle, a member of your staff. Subsequent to that transmittal we are confirming that those RAI items (see Enclosure) are the final version to which to respond and that the requested date for the response is 30 days after the date of this letter (or the first workday thereafter, if the date falls on a weekend).
The enclosed RAI items were reviewed in accordance with the guidance provided in 10 CFR Section 2.390. The NRC staff has determined that no security related or proprietary information is contained therein. Further, it was agreed that you would include the full text of each RAI item with your response as a record of these RAI items.
D. -2 The NRC staff considers that timely responses to requests for additional information help ensure that sufficient time is available for staff review and contribute toward the NRC's goal of efficient and effective use of staff resources.
If circumstances result in the need to revise the requested response date, please contact me at (301) 415-3079.
Sincerely, Karl D. Feintuch, Project Plant Licensing Branch Division of Operating Reactor Office of Nuclear Reactor Docket 50-305, 50-336, 50-338, 50-339, 50-280,
Enclosure:
As stated cc w/encl: Distribution via ListServ REQUEST FOR ADDITIONAL INFORMATION (RAI) REGARDING APPROVAL OF THE CYBER SECURITY PLAN KEWAUNEE POWER STATION, MILLSTONE POWER STATION UNITS 2 AND 3, NORTH ANNA POWER STATION UNITS 1 AND 2. SURRY POWER STATION UNITS 1 AND 2 DOCKET NOS. 50-305, 50-336, 50-423. 50-338, 50-339, 50-280, AND 50-281 RAI 1: Records Retention Title 10 of the Code of Federal Regulations (10 CFR) Paragraph 73.54(c)(2) requires licensees to design a cyber security program to ensure the capability to detect, respond to, and recover from cyber attacks. Furthermore, 10 CFR 73.54(e)(2)(i) requires licensees to maintain a cyber security plan that describes how the licensee will maintain the capability for timely detection and response to cyber attacks. The ability for a licensee to detect and respond to cyber attacks requires accurate and complete records and is further supported by 10 CFR 73.54(h), which states that the licensee shall retain all records and supporting technical documentation required to satisfy the requirements of 10 CFR Section 73.54 as a record until the Commission terminates the license for which the records were developed, and shall maintain superseded portions of these records for at least 3 years after the record is superseded, unless otherwise specified by the Commission.
The licensee's Cyber Security Plan (CSP) in Section 4.13 states that Critical Digital Asset (CDA) audit records and audit data (e.g., operating system logs, network device logs) are retained for a period of time that is less than what is required by 10 CFR 73.54(h}.
Explain the deviation from the 10 CFR 73.54(h} requirement to retain records and supporting technical documentation until the Commission terminates the license (or to maintain superseded portions of these records for at least 3 years) and how that meets the requirements of 10 CFR 73.54. RAI 2: Implementation Schedule The regulation at 10 CFR 73.54, "Protection of digital computer and communication systems and networks," requires licensees to submit a CSP that satisfies the requirements of this section for Commission review and approval.
Furthermore, each submittal must include a proposed implementation schedule and the implementation of the licensee's cyber security program must be consistent with the approved schedule.
Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat. Enclosure
-The completion of several key intermediate milestones (Items (a) through (g) below) would demonstrate progress toward meeting the requirements of 10 CFR 73.54. The Nuclear Regulatory Commission (NRC) staff's expectation is that the key intermediate milestones will be completed in a timely manner, but no later than December 31, 2012. The key CSP implementation milestones are as follows: Establish, train and qualify Cyber Security Assessment Team, as described in Section 3.1.2, "Cyber Security Assessment Team," of the CSP Identify Critical Systems and CDAs, as described in Section 3.1.3, "Identification of Critical Digital Assets," of the CSP. Implement cyber security defense-in-depth architecture by installation of [deterministic one-way devices], as described in Section 4.3, "Defense-In-Depth Protective Strategies" of the CSP. Implement the management, operational and technical cyber security controls that address attacks promulgated by use of portable media, portable devices, and portable equipment as described in Appendix D Section 1.19 "Access Control for Portable and Mobile Devices," of Nuclear Energy Institute (NEI) 08-09, Revision 6. Implement observation and identification of obvious cyber related tampering to existing insider mitigation rounds as described in Appendix E Section 4.3, "Personnel Performing Maintenance and Testing Activities," and Appendix E Section 10.3, "Baseline Configuration" of NEI 08-09, Revision 6. Identify, document, and implement cyber security controls to physical security target set CDAs in accordance with Section 3.1.6, "Mitigation of Vulnerabilities and Application of Cyber Security Controls," of the CSP. Ongoing monitoring and assessment activities will commence for those target set CDAs whose security controls have been implemented, as described in Section 4.4, "Ongoing Monitoring and Assessment," of the CSP. Full implementation of the CSP for all safety, security, and emergency preparedness functions.
Provide a revised CSP implementation schedule that identifies the appropriate milestones, completion dates, supporting rationale, and level of detail to allow the NRC to evaluate the licensee's proposed schedule and associated milestone dates which include the final completion date. It is the NRC's intention to develop a license condition incorporating your revised CSP implementation schedule containing the key milestone dates. RAI Scope of Systems Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat as described in 10 CFR 73.1. In addition,
-3 10 CFR 73.54(a)( 1) states that the licensee shall protect digital computer and communication systems and networks associated with: (i) Safety-related and important-to-safety functions; (ii) Security functions; (iii) Emergency preparedness functions, including offsite communications; and (iv) Support systems and equipment which, if compromised, would adversely impact safety, security, or emergency preparedness functions.
Subsequent to the issuance of the cyber security rule, the NRC stated that 10 CFR 73.54 should be interpreted to include structures, systems, and components (SSCs) in the balance of plant (BOP) that have a nexus to radiological health and safety (Agencywide Documents Access and Management System (ADAMS) Accession No. ML 103490344, dated November 19, 2010). The SSCs in the BOP are those that could directly or indirectly affect reactivity of a nuclear power plant and could result in an unplanned reactor shutdown or transient and are therefore, within the scope of important-to-safety functions described in 10 CFR 73.54(a)(1).
Furthermore, the NRC issued a letter to NEI dated January 5, 2011 (ADAMS Accession No. ML 103550480) that provided licensees with additional guidance on one acceptable approach to comply with the Commission's policy determination.
Explain how the scoping of systems provided by licensee's CSP meets the requirements of 10 CFR 73.54 and the additional guidance provided by the NRC.
D. -2 The NRC staff considers that timely responses to requests for additional information help ensure that sufficient time is available for staff review and contribute toward the NRC's goal of efficient and effective use of staff resources.
If circumstances result in the need to revise the requested response date, please contact me at (301) 415-3079.
Sincerely, /RA/ Karl D. Feintuch, Project Manager Plant Licensing Branch 111-1 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket 50-305, 50-336, 50-423, 50-338, 50-339, 50-280, and 50-281
Enclosure:
As stated cc w/encl: Distribution via ListServ DISTRI BUTION: PUBLIC LPL3-1 R/F Ridsl\lrrDorlDpr Resource PPederson, NSIR RidsNrrDorlLpl3-1 Resource RidsAcrsAcnw_MailCTR Resource RidsNRRPMMilstone Resource RidsNRRPMKewaunee Resource RidsOgcRp Resource RidsNRRPMNorthAnna Resource RidsNrrLABTully Resource RidsRgn3MailCenter Resource RidsNRRPMSurry Resource ADAMS Accession Number* ML
- via memo dated 2/18/11 OFFICE LPL3-1/PM LPL3-1/LA NSIR/DSP/ISCPB/BC LPL3-1/BC NAME KFeintuch BTuily CErlanger*
RPascarelli DATE 03/04/11 03/04/11 02/18/11 03/07/11 OFFICIAL RECORD COpy