ML20129J981: Difference between revisions
StriderTol (talk | contribs) (StriderTol Bot insert) |
StriderTol (talk | contribs) (StriderTol Bot change) |
||
| Line 22: | Line 22: | ||
==Dear Mr. Gross:== | ==Dear Mr. Gross:== | ||
In your letter dated April 8, 2020, you requested the U.S. Nuclear Regulatory Commission (NRC) staff to review and endorse NEI White Paper, Changes to NEI 10-04 and NEI 13-10 Guidance for Identifying and Protecting Digital Assets Associated with Emergency Preparedness Functions, Dated March 2020, located in the NRC Agencywide Documents Access and Management System (ADAMS) Accession Number ML20126G492 to ensure the proposed changes meet the requirements of 10 CFR 73.54, Protection of Digital Computer and Communication Systems, and Networks (known as the NRC Cybersecurity Rule). | In your {{letter dated|date=April 8, 2020|text=letter dated April 8, 2020}}, you requested the U.S. Nuclear Regulatory Commission (NRC) staff to review and endorse NEI White Paper, Changes to NEI 10-04 and NEI 13-10 Guidance for Identifying and Protecting Digital Assets Associated with Emergency Preparedness Functions, Dated March 2020, located in the NRC Agencywide Documents Access and Management System (ADAMS) Accession Number ML20126G492 to ensure the proposed changes meet the requirements of 10 CFR 73.54, Protection of Digital Computer and Communication Systems, and Networks (known as the NRC Cybersecurity Rule). | ||
Prior to the formal submittal of your request, the NRC held a public meeting with Nuclear Energy Institute (NEI) representatives, the public, and other stakeholders on November 7, 2019 to discuss the changes proposed in the NEIs White Paper. Thereafter, the NRC clarified the feedback from the meeting with NEI and industry representatives. Details of the public meeting are documented in the associated meeting summary (ADAMS Accession Number ML19331A409). | Prior to the formal submittal of your request, the NRC held a public meeting with Nuclear Energy Institute (NEI) representatives, the public, and other stakeholders on November 7, 2019 to discuss the changes proposed in the NEIs White Paper. Thereafter, the NRC clarified the feedback from the meeting with NEI and industry representatives. Details of the public meeting are documented in the associated meeting summary (ADAMS Accession Number ML19331A409). | ||
After conducting a review of the NEI White Paper, the regulations, NRC approved guidance, and the statements of consideration for the NRC Cybersecurity Rule, the NRC has concluded that the proposed changes in NEIs White Paper, Changes to NEI 10-04 and NEI 13-10 Guidance for Identifying and Protecting Digital Assets Associated with Emergency Preparedness Functions, Dated March 2020, are consistent with NRC approved implementation strategies or approaches described in NRC Regulatory Guide (RG) 5.71, Cyber Security Program for Nuclear Facilities, (ADAMS Accession Number ML090340159) and in NEI 08-09 Rev. 6, Cyber Security Plan for Nuclear Reactors, (ADAMS Accession Number ML101180437) to meet the requirements of 10 CFR 73.54. | After conducting a review of the NEI White Paper, the regulations, NRC approved guidance, and the statements of consideration for the NRC Cybersecurity Rule, the NRC has concluded that the proposed changes in NEIs White Paper, Changes to NEI 10-04 and NEI 13-10 Guidance for Identifying and Protecting Digital Assets Associated with Emergency Preparedness Functions, Dated March 2020, are consistent with NRC approved implementation strategies or approaches described in NRC Regulatory Guide (RG) 5.71, Cyber Security Program for Nuclear Facilities, (ADAMS Accession Number ML090340159) and in NEI 08-09 Rev. 6, Cyber Security Plan for Nuclear Reactors, (ADAMS Accession Number ML101180437) to meet the requirements of 10 CFR 73.54. | ||
Latest revision as of 07:06, 10 August 2022
| ML20129J981 | |
| Person / Time | |
|---|---|
| Issue date: | 05/19/2020 |
| From: | Russell Felts NRC/NSIR/DPCP |
| To: | Gross W Nuclear Energy Institute |
| Fernandez M, 301-287-3687 | |
| References | |
| Download: ML20129J981 (3) | |
Text
May 19, 2020 Mr. William R. Gross Director, Incident Preparedness Nuclear Energy Institute 1201 F Street NW, Suite 1100 Washington, DC 20004
SUBJECT:
RESPONSE TO NEI WHITE PAPER, CHANGES TO NEI 10-04 AND NEI 13-10 GUIDANCE FOR IDENTIFYING AND PROTECTING DIGITAL ASSETS ASSOCIATED WITH EMERGENCY PREPAREDNESS FUNCTIONS, DATED MARCH 2020
Dear Mr. Gross:
In your letter dated April 8, 2020, you requested the U.S. Nuclear Regulatory Commission (NRC) staff to review and endorse NEI White Paper, Changes to NEI 10-04 and NEI 13-10 Guidance for Identifying and Protecting Digital Assets Associated with Emergency Preparedness Functions, Dated March 2020, located in the NRC Agencywide Documents Access and Management System (ADAMS) Accession Number ML20126G492 to ensure the proposed changes meet the requirements of 10 CFR 73.54, Protection of Digital Computer and Communication Systems, and Networks (known as the NRC Cybersecurity Rule).
Prior to the formal submittal of your request, the NRC held a public meeting with Nuclear Energy Institute (NEI) representatives, the public, and other stakeholders on November 7, 2019 to discuss the changes proposed in the NEIs White Paper. Thereafter, the NRC clarified the feedback from the meeting with NEI and industry representatives. Details of the public meeting are documented in the associated meeting summary (ADAMS Accession Number ML19331A409).
After conducting a review of the NEI White Paper, the regulations, NRC approved guidance, and the statements of consideration for the NRC Cybersecurity Rule, the NRC has concluded that the proposed changes in NEIs White Paper, Changes to NEI 10-04 and NEI 13-10 Guidance for Identifying and Protecting Digital Assets Associated with Emergency Preparedness Functions, Dated March 2020, are consistent with NRC approved implementation strategies or approaches described in NRC Regulatory Guide (RG) 5.71, Cyber Security Program for Nuclear Facilities, (ADAMS Accession Number ML090340159) and in NEI 08-09 Rev. 6, Cyber Security Plan for Nuclear Reactors, (ADAMS Accession Number ML101180437) to meet the requirements of 10 CFR 73.54.
If licensees elect to implement the changes proposed in the NEI White Paper, licensees are responsible to ensure that the implementation of changes to their cyber security programs do not decrease the effectiveness of their cyber security plans in accordance with the
W. Gross 10 CFR 50.54 review process. For additional information, licensees may refer to NEI 11-08, Guidance on Submitting Security Plan Changes, Rev 0, dated August 2012, reviewed and approved for use by the NRC (ADAMS Accession Number ML12216A194).
This letter is not an endorsement of the NEI White Paper, Changes to NEI 10-04 and NEI 13-10 Guidance for Identifying and Protecting Digital Assets Associated with Emergency Preparedness Functions. The NRC expects the changes proposed in the white paper to be incorporated in future revisions of NEI 10-04 and NEI 13-10.
Should you or your staff have any questions, please contact Mr. Mario Fernandez at (301) 287-3687.
Sincerely, Digitally signed by Russell N. Russell N. Felts Date: 2020.05.19 Felts 08:24:36 -04'00' Russell N. Felts, Director (Acting)
Division of Physical and Cyber Security Policy Office of Nuclear Security and Incident
Response
cc: J. Yerokun, Director RI DRS M. Franke, Director RII DRS D. Curtis, Director (Acting) RIII DRS R. Lantz, Director RIV DRS K. Brock, Director HQ DPR
W. Gross
SUBJECT:
RESPONSE TO NEI WHITE PAPER, CHANGES TO NEI 10-04 AND NEI 13-10 GUIDANCE FOR IDENTIFYING AND PROTECTING DIGITAL ASSETS ASSOCIATED WITH EMERGENCY PREPAREDNESS FUNCTIONS, DATED MAY 19, 2020 DISTRIBUTION:
Public ADAMS Accession Number: Package: ML20127H911; Memo: ML20126G492 Letter: ML20129J981 *via e-mail OFFICE NSIR/DPCP/CSB NSIR/DPCP/CSB/BC NSIR/DPR/POB/BC NSIR/DPCP/DD(A)
NAME MFernandez* JBeardsley* RKahler* RFelts*
DATE 05/08/2020 05/11/2020 05/16/2020 05/19/2020 OFFICIAL RECORD COPY