RA-10-074, Company, LLC, Notification Letter Designating Exelon Station Balance of Plant Systems within the Cyber Security Rule Scope: Difference between revisions

From kanterella
Jump to navigation Jump to search
(StriderTol Bot change)
(StriderTol Bot change)
 
Line 16: Line 16:


=Text=
=Text=
{{#Wiki_filter:Exelon H Nuclear
{{#Wiki_filter:__
[IN                             www.exeloncorp.com wv Exekn Exelon.
Exekn H
200  Exelon Way                                                                    Nuclear Nuclear Kennett Ii ct Square, IQ. PA
[IN wv Nuclear Ii ct IQ. [7\\
[7\ 19348 Q
Q RS-10-154 TMI-1 0-091 RA-10-074 September 24, 2010 US. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 Facility Operating License No. NPF-62 NRC Docket No. 50-461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 and 2 Facility Operating License Nos. NPF-1 1 and NPF-18 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 1 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 NRC Docket Nos. 50-277 and 50-278 Exelon Nuclear 200 Exelon Way Kennett Square, PA 19348 RS-10-154 TMI-10-091 RA-10-074 September 24, 2010 www.exeloncorp.com Exelon.
RS-10-154 TMI-1 TMI-10-091 0-091 RA- 10-074 RA-10-074 September 24, 2010 US. Nuclear Regulatory Commission U.S.
Nuclear U.S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 Facility Operating License No. NPF-62 NRC Docket No. 50~461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 and 2 Facility Operating License Nos. NPF-11 and NPF-18 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 1 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 NRC Docket Nos. 50-277 and 50-278
Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1  1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 11 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 11 Facility Operating License No. NPF-62 NRC Docket No. 50~461 50-461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 1 and 2 NPF-1 1 and NPF-18 Facility Operating License Nos. NPF-11 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 11 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 NRC Docket Nos. 50-277 and 50-278


U.S. Nuclear U.S. NuclearRegulatory RegulatoryCommission Commission September September24     24,  2010 2010 Page 22 Page Quad Cities Quad     Cities Nuclear Nuclear Power             Station, Units Power Station,                    and 22 Units 11and Renewed Facility Renewed                      Operating License Facility Operating            License Nos.      DPR-29 and Nos. DPR-29       and DPR-30 DPR-30 NRC Docket NRC      Docket Nos.          50-254 and Nos. 50-254           and 50-265 50-265 Three Mile Three    Mile Island Island Nuclear           Station, Unit Nuclear Station,          Unit 11 Renewed Facility Renewed          Facility Operating Operating License License No. No. DPR-50 DPR-50 NRC Docket NRC      Docket No. No. 50-?89 50-289
U.S. Nuclear Regulatory Commission September24 2010 Page 2 Quad Cities Nuclear Power Station, Units 1 and 2 Renewed Facility Operating License Nos. DPR-29 and DPR-30 NRC Docket Nos. 50-254 and 50-265 Three Mile Island Nuclear Station, Unit 1 Renewed Facility Operating License No. DPR-50 NRC Docket No. 50-?89


==Subject:==
==Subject:==
Notification Letter Designating Exelon Station Balance of Plant Systems within the Cyber Security Rule Scope
==Reference:==
(1) Letter from Jim Hughes (NERC) to Alison MacKellar (Exelon Generation Company, LLC), Request for Data or Information: Nuclear Power Plant Bright-Line Survey, dated June 15, 2010 (2) Letter from Michael Moon (NERC) to Exelon Nuclear Power Stations (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1), NERCs Response to the Completed Bright Line Survey, dated August 27, 2010 By Order dated March 19, 20091, the Federal Energy Regulatory Commission (FERC) clarified that the balance of planf equipment within a nuclear power plant is subject to compliance with the FERC approved Critical Infrastructure Protection (CIP) Cyber Security Reliability Standards.
Paragraph 50 of the Order provides for an exception from the CIP Reliability Standards for equipment in the balance of plant that is subject to the NRC cyber security regulations.
Pursuant to Paragraph 50 of the Order, the North American Electric Reliability Corporation (NERC) has been engaging in a Bright-Line determination process (Reference (1)) to clarify the systems that would be subject to the NRC cyber security rule (10 CFR 73.54), and those that would be subject to the CIP Reliability Standards.
In the Reference (2) letters, NERC is requiring that Exelon Generation Company, LLC (Exelon) provide the NRC with a letter identifying all balance of plant Systems, Structures, and Components (SSCs) considered important to safety with respect to the NRCs cyber security regulation for each of the Exelon plants (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1). As documented in our response to the Bright-Line Survey, the balance of plant Systems in Attachment 1 of the Survey are important to safety, and thus, are within the scope of 10 CFR 73.54.
1 Mandatory Reliability Standards for Critical Infrastructure Protection, order on clarification, Order No.
706-B, 126 FERC 11 61,229 (2009).
U.S. Nuclear Regulatory Commission September 24, 2010 Page 2 Quad Cities Nuclear Power Station, Units 1 and 2 Renewed Facility Operating License Nos. DPR-29 and DPR-30 NRC Docket Nos. 50-254 and 50-265 Three Mile Island Nuclear Station, Unit 1 Renewed Facility Operating License No. DPR-50 NRC Docket No. 50-289


==Subject:==
==Subject:==
Notification Letter Notification                  Designating Exelon Letter Designating                                  Balance of Station Balance Exelon Station                              Systems within Plant Systems of Plant                  within the the  Cyber Cyber      Security Security        Rule Rule    Scope Scope
Notification Letter Designating Exelon Station Balance of Plant Systems within the Cyber Security Rule Scope
 
==Reference:==


==Reference:==
==Reference:==
(1) Letter (1)  Letter from from Jim        Hughes (NERC)
(1) Letter from Jim Hughes (NERC) to Alison MacKellar (Exelon Generation Company, LLC), "Request for Data or Information: Nuclear Power Plant
Jim Hughes           (NERC) to  to Alison                   (Exelon Generation MacKellar (Exelon Alison MacKellar                    Generation Company, LLC),
'Bright-Line' Survey," dated June 15, 2010 (2) Letter from Michael Moon (NERC) to Exelon Nuclear Power Stations (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1), "NERC's Response to the Completed Bright Line Survey," dated August 27,2010 By Order dated March 19, 20091, the Federal Energy Regulatory Commission (FERC) clarified that the "balance of plant" equipment within a nuclear power plant is subject to compliance with the FERC approved Critical Infrastructure Protection (CIP) Cyber Security Reliability Standards.
Company,                    "Request for LLC), Request                Data or for Data       Information: Nuclear Power Plant or Information:     Nuclear     Power     Plant
Paragraph 50 of the Order provides for an exception from the CIP Reliability Standards for equipment in the balance of plant that is subject to the NRC cyber security regulations.
                          'Bright-Line' Survey, Bright-Line                      dated June Survey," dated           June 15, 15, 2010 2010 (2) Letter (2)  Letter from from Michael Michael Moon Moon (NERC)(NERC) to  to Exelon    Nuclear Power Exelon Nuclear         Power Stations Stations (Braidwood (Braidwood          Station, Station,   Units Units     1 1  and and 2; 2;  Byron Byron    Station, Station,    Units   1 1  and and  2; 2; Clinton Power      Station, Power Station, Unit       Unit  1; 1;  Dresden       Nuclear Nuclear   Power     Station, Station,     Units Units   2 2 and 3; LaSalle Station, Units County Station,           Units 11 and and 2; Limerick         Generating       Station,   Units   11 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom                                   Atomic   Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 11 and 2; and Three Mile Island Nuclear Station, Unit 1), NERCs              "NERC's Response to the Completed Bright Line Survey,"       Survey, dated August 27,              2010 27,2010 By By Order dated March 19, 2009          20091,1, the Federal Energy Regulatory Commission (FERC) clarified that that the "balance balance of plant"planf equipment within a nuclear power plant is subject to compliance with the the FERC approved Critical Infrastructure Protection (CIP) Cyber Security Reliability Standards.
Pursuant to Paragraph 50 of the Order, the North American Electric Reliability Corporation (NERC) has been engaging in a "Bright-Line" determination process (Reference (1)) to clarify the systems that would be subject to the NRC cyber security rule (10 CFR 73.54), and those that would be subject to the CIP Reliability Standards.
Paragraph Paragraph 50 of the Order provides for an exception from the CIP Reliability Standards for equipment equipment in the balance of plant that is subject to the NRC cyber security regulations.                          regulations.
In the Reference (2) letters, NERC is requiring that Exelon Generation Company, LLC (Exelon) provide the NRC with a letter identifying all balance of plant Systems, Structures, and Components (SSCs) considered important to safety with respect to the NRC's cyber security regulation for each of the Exelon plants (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1). As documented in our response to the Bright-Line Survey, the balance of plant Systems in Attachment 1 of the Survey are important to safety, and thus, are within the scope of 10 CFR 73.54.
Pursuant     to Paragraph Pursuant Paragraph               50   of   the   Order,     the     North North    American     Electric Electric  Reliability     Corporation (NERC)
1 Mandatory Reliability Standards for Critical Infrastructure Protection, order on clarification, Order No.
(NERC)    has   been been   engaging       in in a "Bright-Line"           determinatio Bright-Line determination process     n process      (Reference                 clarify (1)) to clarify the the systems systems that that would would be  be subject subject to    to the the NRCNRC cyber       security rule cyber security          (10 rule (10    CFR     73.54),
706-B, 126 FERC 1161,229 (2009).
73.54), andand  those that that would would bebe subject subject to to the the CIP CIP Reliability          Standards.
Reliability Standards.
In In the the Reference Reference (2)  (2) letters, letters, NERC NERC is    is requiring requiring that  that Exelon                     Company, LLC Generation Company, Exelon Generation                                (Exelon)
LLC (Exelon) provide    the  NRC provide the NRC with a with  a  letter letter    identifying identifying      all all  balance balance    of of  plant plant   Systems, Systems,      Structures, Structures,     and and Components Components (SSCs) (SSCs) considered considered importantimportant to         safety with to safety          respect to with respect        the NRC's to the                        security cyber security NRCs cyber regulation regulation forfor each each of of the the Exelon Exelon plants           (Braidwood Station, plants (Braidwood                        Units   1 and   2; Byron   Station, Station, Units 1 and 2; Byron Station, Units          Units 11 and and 2; 2; Clinton Clinton Power Power Station, Station, Unit Unit 1;1; Dresden Dresden Nuclear           Power Station, Nuclear Power                    Units    2 and Station, Units 2 and 3; LaSalle3;  LaSalle County County Station, Station, Units Units 11 and and 2; 2; Limerick         Generating Station, Limerick Generating                        Units 11 and Station, Units        and 2; 2; Oyster               Nuclear Creek Nuclear Oyster Creek Generating Generating Station; Station; Peach Peach Bottom Bottom Atomic Atomic Power Power Station,       Units 22 and Station, Units        and 3; 3; Quad Quad Cities        Nuclear Cities Nuclear Power    Station, Power Station, Units Units  11 and and  2; 2;    and and Three Three     Mile Mile      Island Island  Nuclear Nuclear    Station, Station,    Unit Unit    1).
1). As As   documented documented        inin our    response    to  the  Bright-Line our response to the Bright-Line               Survey, Survey,     the the    balance balance      of of  plant plant  Systems Systems        in in  Attachment Attachment      11  of of  the the Survey Survey areare important important to   to safety, safety, and  and thus, thus, are are within    the scope within the   scope of         CFR 73.54.
10 CFR of 10            73.54.
11 Mandatory MandatoryReliability ReliabilityStandards Standardsfor    forCritical    Infrastructure Protection, Critical Infrastructure                     orderon Protection, order     on clarification,    OrderNo.
clarification, Order     No.
706-B, 706-B, 126 126 FERC FERC1161,229          (2009).
11 61,229 (2009).


us.
us. Nuclear Regulatory Commission September 24, 2010 Page 3 In accordance with the requirements of 10 CFR 73.54 (b)(1), a comprehensive identification of SSCs subject to the requirements of 1 0 CFR 73 54 will be developed during the implementation of the cyber security program The program is implemented in accordance with the schedules submitted to the NRC by {{letter dated|date=July 23, 2010|text=letter dated July 23, 2010}}, with the Exelon Cyber Security Plan. This identification of SSCs will be available for inspection upon completion and will contain those Systems as identified in Attachment 1 of the Exelon response to the Bright Line Survey Providing the requested information in this alternate matter satisfies the intent of the NERC letter.
U.S. Nuclear      Regulatory Commission Nuclear Regulatory           Commission September 24, September            2010 24, 2010 Page 33 Page In accordance In accordance with             requirements of the requirements with the                        of 1010 CFR                 (b)(1), aa comprehensi 73.54 (b)(1),
In the Reference (2) letters, NERC is also requiring that each nuclear power plant submit a revised cyber security plan to the NRC for its review and approval On or before November 30, 2010, Exelon will supplement our Cyber Security Plan submittal to clarify the scope of systems described in Section 2.1, Scope and Purpose. Section 2.1, will be amended to clarify the balance of plant SSCs that will be included in the scope of the cyber security program.
CFR 73.54                    comprehensive       identification of ve identification    of SSCs subject SSCs   subject to  to the requirements of the requirements          of 110    CFR 73 0 CFR            54 will 73.54        be developed will be                        the implementati during the developed during            implementation on of the of the cyber cyber security       program. The security program                  program is The program              implemented in is implemented           accordance with in accordance     with the the schedules schedules submitted submitted    to to   the the   NRC NRC     by by  letter letter  dated dated     July july  23, 23,   2010, 2010,    with with  the the Exelon Exelon    Cyber Cyber    Security Security    Plan.
There are no regulatory commitments contained in this letter. Should you have any questions concerning this letter, or require additional information, please contact Doug Walker at (610) 765-5952.
Plan. This This identification     of identification of SSCsSSCs    will will  be be  available available    for for inspection inspection       upon upon  completion completion    and and  will will contain contain  those those Systems as Systems          identified in as identified        Attachment 11 of in Attachment                the Exelon of the                response to Exelon response           the Bright to the         Line Survey Bright-Line   Survey.
Respectfully, 9f :
Providing the Providing   the requested         information in requested information          in this this alternate                             the intent of satisfies the matter satisfies alternate matter                        intent       the NERC of the   NERC letter.
Pamela B.Cowan Director
letter.
- Licensing and Regulatory Affairs Exelon Generation Company, LLC cc:
In the Reference (2)
Michael Moon, Director of Compliance Operations, NERC Jim Hughes, NERC James T. Wiggins, Director Office of Nuclear Security & Incident Response, NRC Eric Leads, Director Office of Nuclear Reactor Regulation, NRC USNRC Region I, Regional Administrator USNRC Region Ill, Regional Administrator NRC Project Manager, NRR
In                      (2) letters,   NERC is letters, NERC            also requiring that is also                                  nuclear power each nuclear that each                                submit a plant submit power plant revised cyber     security revised cyber security          plan plan   to to the the  NRC NRC      for for  its its   review review   and and   approval approval. On On  or or before before    November November  30, 30, Exelon will supplement our Cyber Security 2010, Exelon 2010,                                                      Security      Plan   submittal submittal   to clarify the scope scope ofof systems described in  in Section 2.1,                           Purpose." Section "Scope and Purpose.
- Braidwood Station NRC Project Manager, NRR
2.1, Scope                                            2.1, will be amended to clarify Section 2.1,                              clarify the balance of plant SSCs that will be included balance                                          included in      in the scope of the cyber security program.
- Byron Station NRC Project Manager, NRR
There are no regulatory commitmentcommitmentss contained in this letter. Should you have any questions concerning this letter, or require additional information, please contact Doug Walker at (610) 765-5952.
- Clinton Power Station NRC Project Manager, NRR
Respectfully, Respectfully, fJ/~
- Dresden Nuclear Power Station NRC Project Manager, NRR
9f otmuO{61~
- LaSalle County Station NRC Project Manager, NRR
Pamela B. Cowan B.Cowan Director - Licensing and Regulatory Affairs Exelon Generation Company, LLC cc:     Michael Moon, Director of Compliance Operations, NERC Jim Hughes, NERC James T. Wiggins, Director - Office of Nuclear Security & Incident Response, NRC Eric Leads, Director - Office of Nuclear Reactor Regulation, NRC USNRC Region I, Regional Administrator  Administrator USNRC Region III,                          Administrator Ill, Regional Administrator NRC Project Manager,Manager, NRR   NRR - Braidwood
- Limerick Generating Station NRC Project Manager, NRR
                                                        -   Braidwood Station NRC NRC Project Project Manager, NRR - Byron Station
- Oyster Creek Nuclear Generating Station NRC Project Manager, NRR
                                                        -              Station NRC       Project NRC Project        Manager,       NRR NRR     -
- Peach Bottom Atomic Power Station NRC Project Manager, NRR
                                                        -   Clinton Clinton      Power     Station Power Station NRC NRC Project Manager,Manager, NRR    NRR - Dresden
- Quad Cities Nuclear Power Station NRC Project Manager, NRR -Three Mile Island Nuclear Station USNRC Senior Resident Inspector
                                                        -   Dresden Nuclear Nuclear Power       Station Power Station NRC NRC Project Project Manager, Manager, NRR           -   LaSalle County NRR - LaSalle                      Station County Station NRC NRC Project Project Manager, Manager, NRR    NRR - Limerick
- Braidwood Station USNRC Senior Resident Inspector
                                                        -   Limerick Generating            Station Generating Station NRC NRC Project Project Manager, Manager, NRR   NRR - Oyster
- Byron Station USNRC Senior Resident Inspector
                                                        -   Oyster Creek Creek Nuclear Nuclear Generating        Station Generating Station NRC NRC Project Project Manager, Manager, NRR   NRR - Peach
- Clinton Power Station USNRC Senior Resident Inspector
                                                        -   Peach Bottom           Atomic Power Bottom Atomic                Station Power Station NRC NRC Project         Manager, NRR Project Manager,          NRR - Quad
- Dresden Nuclear Power Station USNRC Senior Resident Inspector - LaSalle County Station USNRC Senior Resident Inspector
                                                          - Quad Cities         Nuclear Power Cities Nuclear                Station Power Station NRC NRC Project Project Manager, Manager, NRR  NRR -Three
- Limerick Generating Station USNRC Senior Resident Inspector
                                                          -Three Mile         Island   Nuclear Mile Island Nuclear StationStation USNRC USNRC Senior  Senior Resident         Inspector - Braidwood Resident Inspector           -                   Station Braidwood Station USNRC USNRC Senior  Senior Resident         Inspector - Byron Resident Inspector           -   Byron Station Station USNRC USNRC Senior Senior Resident         Inspector - Clinton Resident Inspector             -             Power Station Clinton Power       Station USNRC USNRC Senior                         Inspector - Dresden Resident Inspector Senior Resident                           -               Nuclear Power Dresden Nuclear                 Station Power Station USNRC USNRC Senior Senior    Resident Resident      Inspector Inspector        --  LaSalle LaSalle     County County   Station Station USNRC USNRC Senior                         Inspector - Limerick Resident Inspector Senior Resident                          - Limerick Generating        Station Generating Station USNRC USNRC Senior Senior Resident         Inspector - Oyster Resident Inspector            -            Creek Nuclear Oyster Creek      Nuclear Generating        Station Generating Station USNRC USNRC Senior Senior Resident         Inspector - Peach Resident Inspector            -                      Atomic Power Bottom Atomic Peach Bottom                          Station Power Station
- Oyster Creek Nuclear Generating Station USNRC Senior Resident Inspector
- Peach Bottom Atomic Power Station U.S. Nuclear Regulatory Commission September 24, 2010 Page 3 In accordance with the requirements of 10 CFR 73.54 (b)(1), a comprehensive identification of SSCs subject to the requirements of 10 CFR 73.54 will be developed during the implementation of the cyber security program. The program is implemented in accordance with the schedules submitted to the NRC by letter dated july 23, 2010, with the Exelon Cyber Security Plan. This identification of SSCs will be available for inspection upon completion and will contain those Systems as identified in Attachment 1 of the Exelon response to the Bright-Line Survey.
Providing the requested information in this alternate matter satisfies the intent of the NERC letter.
In the Reference (2) letters, NERC is also requiring that each nuclear power plant submit a revised cyber security plan to the NRC for its review and approval. On or before November 30, 2010, Exelon will supplement our Cyber Security Plan submittal to clarify the scope of systems described in Section 2.1, "Scope and Purpose." Section 2.1, will be amended to clarify the balance of plant SSCs that will be included in the scope of the cyber security program.
There are no regulatory commitments contained in this letter. Should you have any questions concerning this letter, or require additional information, please contact Doug Walker at (610) 765-5952.
Respectfully, fJ/~ otmuO{61~
Pamela B. Cowan Director - Licensing and Regulatory Affairs Exelon Generation Company, LLC cc:
Michael Moon, Director of Compliance Operations, NERC Jim Hughes, NERC James T. Wiggins, Director - Office of Nuclear Security & Incident Response, NRC Eric Leads, Director - Office of Nuclear Reactor Regulation, NRC USNRC Region I, Regional Administrator USNRC Region III, Regional Administrator NRC Project Manager, NRR - Braidwood Station NRC Project Manager, NRR - Byron Station NRC Project Manager, NRR - Clinton Power Station NRC Project Manager, NRR - Dresden Nuclear Power Station NRC Project Manager, NRR - LaSalle County Station NRC Project Manager, NRR - Limerick Generating Station NRC Project Manager, NRR - Oyster Creek Nuclear Generating Station NRC Project Manager, NRR - Peach Bottom Atomic Power Station NRC Project Manager, NRR - Quad Cities Nuclear Power Station NRC Project Manager, NRR -Three Mile Island Nuclear Station USNRC Senior Resident Inspector - Braidwood Station USNRC Senior Resident Inspector - Byron Station USNRC Senior Resident Inspector - Clinton Power Station USNRC Senior Resident Inspector - Dresden Nuclear Power Station USNRC Senior Resident Inspector - LaSalle County Station USNRC Senior Resident Inspector - Limerick Generating Station USNRC Senior Resident Inspector - Oyster Creek Nuclear Generating Station USNRC Senior Resident Inspector - Peach Bottom Atomic Power Station


U.S. Nuclear Regulatory Commission US.
US. Nuclear Regulatory Commission September 24, 2010 Page 4 cc (continued):
September 24, 24, 2010 2010 Page 4 cc (continued):
USNRC Senior Resident Inspector
USNRC Senior Resident Inspector USNRC                                 -             Nuclear Power Station Inspector - Quad Cities Nuclear USNRC SeniorSenior Resident Inspector -Three Mile Island Nuclear Station Island Nuclear Station SS. TT. Gray, State of Maryland Maryland Illinois Emergency Management Agency - Division of Nuclear Safety R. R R    R. Janati - Bureau of Radiation Protection, Commonwealth of Pennsylvania Director, Bureau of Nuclear Engineering, New Jersey Department of Environmental Protection Mayor of Lacey Township Alison Mackellar, Exelon Nuclear NERC Compliance Contact}}
- Quad Cities Nuclear Power Station USNRC Senior Resident Inspector -Three Mile Island Nuclear Station S T Gray, State of Maryland Illinois Emergency Management Agency - Division of Nuclear Safety R R Janati Bureau of Radiation Protection, Commonwealth of Pennsylvania Director, Bureau of Nuclear Engineering, New Jersey Department of Environmental Protection Mayor of Lacey Township Alison Mackellar, Exelon Nuclear NERC Compliance Contact U.S. Nuclear Regulatory Commission September 24, 2010 Page 4 cc (continued):
USNRC Senior Resident Inspector - Quad Cities Nuclear Power Station USNRC Senior Resident Inspector -Three Mile Island Nuclear Station S. T. Gray, State of Maryland Illinois Emergency Management Agency - Division of Nuclear Safety R. R. Janati - Bureau of Radiation Protection, Commonwealth of Pennsylvania Director, Bureau of Nuclear Engineering, New Jersey Department of Environmental Protection Mayor of Lacey Township Alison Mackellar, Exelon Nuclear NERC Compliance Contact}}

Latest revision as of 02:47, 14 January 2025

Company, LLC, Notification Letter Designating Exelon Station Balance of Plant Systems within the Cyber Security Rule Scope
ML102670438
Person / Time
Site: Dresden, Peach Bottom, Oyster Creek, Byron, Braidwood, Limerick, Clinton, Quad Cities, LaSalle, Crane
Issue date: 09/24/2010
From: Cowan P
Exelon Generation Co, Exelon Nuclear
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
RA-10-074, RS-10-154, TMI-10-091
Download: ML102670438 (4)
v • d • e


Text

__

Exekn H

[IN wv Nuclear Ii ct IQ. [7\\

Q RS-10-154 TMI-1 0-091 RA-10-074 September 24, 2010 US. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 Facility Operating License No. NPF-62 NRC Docket No. 50-461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 and 2 Facility Operating License Nos. NPF-1 1 and NPF-18 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 1 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 NRC Docket Nos. 50-277 and 50-278 Exelon Nuclear 200 Exelon Way Kennett Square, PA 19348 RS-10-154 TMI-10-091 RA-10-074 September 24, 2010 www.exeloncorp.com Exelon.

Nuclear U.S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457 Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455 Clinton Power Station, Unit 1 Facility Operating License No. NPF-62 NRC Docket No. 50~461 Dresden Nuclear Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-19 and DPR-25 NRC Docket Nos. 50-237 and 50-249 LaSalle County Station, Units 1 and 2 Facility Operating License Nos. NPF-11 and NPF-18 NRC Docket Nos. 50-373 and 50-374 Limerick Generating Station, Units 1 and 2 Facility Operating License Nos. NPF-39 and NPF-85 NRC Docket Nos. 50-352 and 50-353 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 NRC Docket No. 50-219 Peach Bottom Atomic Power Station, Units 2 and 3 Renewed Facility Operating License Nos. DPR-44 and DPR-56 NRC Docket Nos. 50-277 and 50-278

U.S. Nuclear Regulatory Commission September24 2010 Page 2 Quad Cities Nuclear Power Station, Units 1 and 2 Renewed Facility Operating License Nos. DPR-29 and DPR-30 NRC Docket Nos. 50-254 and 50-265 Three Mile Island Nuclear Station, Unit 1 Renewed Facility Operating License No. DPR-50 NRC Docket No. 50-?89

Subject:

Notification Letter Designating Exelon Station Balance of Plant Systems within the Cyber Security Rule Scope

Reference:

(1) Letter from Jim Hughes (NERC) to Alison MacKellar (Exelon Generation Company, LLC), Request for Data or Information: Nuclear Power Plant Bright-Line Survey, dated June 15, 2010 (2) Letter from Michael Moon (NERC) to Exelon Nuclear Power Stations (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1), NERCs Response to the Completed Bright Line Survey, dated August 27, 2010 By Order dated March 19, 20091, the Federal Energy Regulatory Commission (FERC) clarified that the balance of planf equipment within a nuclear power plant is subject to compliance with the FERC approved Critical Infrastructure Protection (CIP) Cyber Security Reliability Standards.

Paragraph 50 of the Order provides for an exception from the CIP Reliability Standards for equipment in the balance of plant that is subject to the NRC cyber security regulations.

Pursuant to Paragraph 50 of the Order, the North American Electric Reliability Corporation (NERC) has been engaging in a Bright-Line determination process (Reference (1)) to clarify the systems that would be subject to the NRC cyber security rule (10 CFR 73.54), and those that would be subject to the CIP Reliability Standards.

In the Reference (2) letters, NERC is requiring that Exelon Generation Company, LLC (Exelon) provide the NRC with a letter identifying all balance of plant Systems, Structures, and Components (SSCs) considered important to safety with respect to the NRCs cyber security regulation for each of the Exelon plants (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1). As documented in our response to the Bright-Line Survey, the balance of plant Systems in Attachment 1 of the Survey are important to safety, and thus, are within the scope of 10 CFR 73.54.

1 Mandatory Reliability Standards for Critical Infrastructure Protection, order on clarification, Order No.

706-B, 126 FERC 11 61,229 (2009).

U.S. Nuclear Regulatory Commission September 24, 2010 Page 2 Quad Cities Nuclear Power Station, Units 1 and 2 Renewed Facility Operating License Nos. DPR-29 and DPR-30 NRC Docket Nos. 50-254 and 50-265 Three Mile Island Nuclear Station, Unit 1 Renewed Facility Operating License No. DPR-50 NRC Docket No. 50-289

Subject:

Notification Letter Designating Exelon Station Balance of Plant Systems within the Cyber Security Rule Scope

Reference:

(1) Letter from Jim Hughes (NERC) to Alison MacKellar (Exelon Generation Company, LLC), "Request for Data or Information: Nuclear Power Plant

'Bright-Line' Survey," dated June 15, 2010 (2) Letter from Michael Moon (NERC) to Exelon Nuclear Power Stations (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1), "NERC's Response to the Completed Bright Line Survey," dated August 27,2010 By Order dated March 19, 20091, the Federal Energy Regulatory Commission (FERC) clarified that the "balance of plant" equipment within a nuclear power plant is subject to compliance with the FERC approved Critical Infrastructure Protection (CIP) Cyber Security Reliability Standards.

Paragraph 50 of the Order provides for an exception from the CIP Reliability Standards for equipment in the balance of plant that is subject to the NRC cyber security regulations.

Pursuant to Paragraph 50 of the Order, the North American Electric Reliability Corporation (NERC) has been engaging in a "Bright-Line" determination process (Reference (1)) to clarify the systems that would be subject to the NRC cyber security rule (10 CFR 73.54), and those that would be subject to the CIP Reliability Standards.

In the Reference (2) letters, NERC is requiring that Exelon Generation Company, LLC (Exelon) provide the NRC with a letter identifying all balance of plant Systems, Structures, and Components (SSCs) considered important to safety with respect to the NRC's cyber security regulation for each of the Exelon plants (Braidwood Station, Units 1 and 2; Byron Station, Units 1 and 2; Clinton Power Station, Unit 1; Dresden Nuclear Power Station, Units 2 and 3; LaSalle County Station, Units 1 and 2; Limerick Generating Station, Units 1 and 2; Oyster Creek Nuclear Generating Station; Peach Bottom Atomic Power Station, Units 2 and 3; Quad Cities Nuclear Power Station, Units 1 and 2; and Three Mile Island Nuclear Station, Unit 1). As documented in our response to the Bright-Line Survey, the balance of plant Systems in Attachment 1 of the Survey are important to safety, and thus, are within the scope of 10 CFR 73.54.

1 Mandatory Reliability Standards for Critical Infrastructure Protection, order on clarification, Order No.

706-B, 126 FERC 1161,229 (2009).

us. Nuclear Regulatory Commission September 24, 2010 Page 3 In accordance with the requirements of 10 CFR 73.54 (b)(1), a comprehensive identification of SSCs subject to the requirements of 1 0 CFR 73 54 will be developed during the implementation of the cyber security program The program is implemented in accordance with the schedules submitted to the NRC by letter dated July 23, 2010, with the Exelon Cyber Security Plan. This identification of SSCs will be available for inspection upon completion and will contain those Systems as identified in Attachment 1 of the Exelon response to the Bright Line Survey Providing the requested information in this alternate matter satisfies the intent of the NERC letter.

In the Reference (2) letters, NERC is also requiring that each nuclear power plant submit a revised cyber security plan to the NRC for its review and approval On or before November 30, 2010, Exelon will supplement our Cyber Security Plan submittal to clarify the scope of systems described in Section 2.1, Scope and Purpose. Section 2.1, will be amended to clarify the balance of plant SSCs that will be included in the scope of the cyber security program.

There are no regulatory commitments contained in this letter. Should you have any questions concerning this letter, or require additional information, please contact Doug Walker at (610) 765-5952.

Respectfully, 9f :

Pamela B.Cowan Director

- Licensing and Regulatory Affairs Exelon Generation Company, LLC cc:

Michael Moon, Director of Compliance Operations, NERC Jim Hughes, NERC James T. Wiggins, Director Office of Nuclear Security & Incident Response, NRC Eric Leads, Director Office of Nuclear Reactor Regulation, NRC USNRC Region I, Regional Administrator USNRC Region Ill, Regional Administrator NRC Project Manager, NRR

- Braidwood Station NRC Project Manager, NRR

- Byron Station NRC Project Manager, NRR

- Clinton Power Station NRC Project Manager, NRR

- Dresden Nuclear Power Station NRC Project Manager, NRR

- LaSalle County Station NRC Project Manager, NRR

- Limerick Generating Station NRC Project Manager, NRR

- Oyster Creek Nuclear Generating Station NRC Project Manager, NRR

- Peach Bottom Atomic Power Station NRC Project Manager, NRR

- Quad Cities Nuclear Power Station NRC Project Manager, NRR -Three Mile Island Nuclear Station USNRC Senior Resident Inspector

- Braidwood Station USNRC Senior Resident Inspector

- Byron Station USNRC Senior Resident Inspector

- Clinton Power Station USNRC Senior Resident Inspector

- Dresden Nuclear Power Station USNRC Senior Resident Inspector - LaSalle County Station USNRC Senior Resident Inspector

- Limerick Generating Station USNRC Senior Resident Inspector

- Oyster Creek Nuclear Generating Station USNRC Senior Resident Inspector

- Peach Bottom Atomic Power Station U.S. Nuclear Regulatory Commission September 24, 2010 Page 3 In accordance with the requirements of 10 CFR 73.54 (b)(1), a comprehensive identification of SSCs subject to the requirements of 10 CFR 73.54 will be developed during the implementation of the cyber security program. The program is implemented in accordance with the schedules submitted to the NRC by letter dated july 23, 2010, with the Exelon Cyber Security Plan. This identification of SSCs will be available for inspection upon completion and will contain those Systems as identified in Attachment 1 of the Exelon response to the Bright-Line Survey.

Providing the requested information in this alternate matter satisfies the intent of the NERC letter.

In the Reference (2) letters, NERC is also requiring that each nuclear power plant submit a revised cyber security plan to the NRC for its review and approval. On or before November 30, 2010, Exelon will supplement our Cyber Security Plan submittal to clarify the scope of systems described in Section 2.1, "Scope and Purpose." Section 2.1, will be amended to clarify the balance of plant SSCs that will be included in the scope of the cyber security program.

There are no regulatory commitments contained in this letter. Should you have any questions concerning this letter, or require additional information, please contact Doug Walker at (610) 765-5952.

Respectfully, fJ/~ otmuO{61~

Pamela B. Cowan Director - Licensing and Regulatory Affairs Exelon Generation Company, LLC cc:

Michael Moon, Director of Compliance Operations, NERC Jim Hughes, NERC James T. Wiggins, Director - Office of Nuclear Security & Incident Response, NRC Eric Leads, Director - Office of Nuclear Reactor Regulation, NRC USNRC Region I, Regional Administrator USNRC Region III, Regional Administrator NRC Project Manager, NRR - Braidwood Station NRC Project Manager, NRR - Byron Station NRC Project Manager, NRR - Clinton Power Station NRC Project Manager, NRR - Dresden Nuclear Power Station NRC Project Manager, NRR - LaSalle County Station NRC Project Manager, NRR - Limerick Generating Station NRC Project Manager, NRR - Oyster Creek Nuclear Generating Station NRC Project Manager, NRR - Peach Bottom Atomic Power Station NRC Project Manager, NRR - Quad Cities Nuclear Power Station NRC Project Manager, NRR -Three Mile Island Nuclear Station USNRC Senior Resident Inspector - Braidwood Station USNRC Senior Resident Inspector - Byron Station USNRC Senior Resident Inspector - Clinton Power Station USNRC Senior Resident Inspector - Dresden Nuclear Power Station USNRC Senior Resident Inspector - LaSalle County Station USNRC Senior Resident Inspector - Limerick Generating Station USNRC Senior Resident Inspector - Oyster Creek Nuclear Generating Station USNRC Senior Resident Inspector - Peach Bottom Atomic Power Station

US. Nuclear Regulatory Commission September 24, 2010 Page 4 cc (continued):

USNRC Senior Resident Inspector

- Quad Cities Nuclear Power Station USNRC Senior Resident Inspector -Three Mile Island Nuclear Station S T Gray, State of Maryland Illinois Emergency Management Agency - Division of Nuclear Safety R R Janati Bureau of Radiation Protection, Commonwealth of Pennsylvania Director, Bureau of Nuclear Engineering, New Jersey Department of Environmental Protection Mayor of Lacey Township Alison Mackellar, Exelon Nuclear NERC Compliance Contact U.S. Nuclear Regulatory Commission September 24, 2010 Page 4 cc (continued):

USNRC Senior Resident Inspector - Quad Cities Nuclear Power Station USNRC Senior Resident Inspector -Three Mile Island Nuclear Station S. T. Gray, State of Maryland Illinois Emergency Management Agency - Division of Nuclear Safety R. R. Janati - Bureau of Radiation Protection, Commonwealth of Pennsylvania Director, Bureau of Nuclear Engineering, New Jersey Department of Environmental Protection Mayor of Lacey Township Alison Mackellar, Exelon Nuclear NERC Compliance Contact

Retrieved from "https://kanterella.com/w/index.php?title=RA-10-074,_Company,_LLC,_Notification_Letter_Designating_Exelon_Station_Balance_of_Plant_Systems_within_the_Cyber_Security_Rule_Scope&oldid=5291968"