ML17212A633

07-20-17 NEI Request Endorsement of NEI 0809 Addendums 2 and 4

ML17212A633
Person / Time
Site:	Nuclear Energy Institute
Issue date:	07/20/2017
From:	Perkins-Grew S H Nuclear Energy Institute
To:	Andersen J W NRC/NSIR/DPCP
Pantalo C B
Shared Package
ML17212A630	List: ML17212A632 ML17212A633 ML17212A635
References
Download: ML17212A633 (2)

Text

SUSAN PERKINS-GREW Sr. Director, Nuclear Security & Incident Preparedness 1201 F Street

, NW, Suite 1100 Washington, DC 20004 P: 202.739.8016 spg@nei.org nei.org July 20, 2017

Mr. James W. Andersen Director, Division of Security Policy Nuclear Security and Incident Response U.S. Nuclear Regulatory Commission Washington, DC 20555-0001

Subject:

Endorsement of Revised Addendum s 2 and 4 to NEI 08-09, Cyber Security Plan for Nuclear Power Reactors , Revision 6, Dated April 2010

Project Number: 689

Dear Mr. Andersen:

By letter dated April 28, 2010, the Nuclear Energy Institute (NEI) 1 submitted, on behalf of the nuclear energy industry, NEI 08-09 , Cyber Security Plan for Nuclear Power Reactors

, Revision 6, dated April 2010 , for U.S. Nuclear Regulatory Commission (NRC) review and endorsement (NRC Agencywide Documents Access and Management System (ADAMS) Accession No. ML101180434). Subsequently, by letter dated May 5, 20 10, the NRC informed NEI that NEI 08-09, Revision 6, is acceptable for use by licensees (ADAMS Accession No. ML101190371

). NEI 08-09 provides a template for the implementation of the cyber security plan required by 10 CFR 73.54

. Lessons learned through licensee implementation efforts, and through a series of implementation workshops conducted during 2016 that included industry and NRC observers indicate that additional clarity on certain cyber security program elements discussed in NEI 08

-09 is necessary.

Accordingly, by letter dated June 29, 2017 , NEI submitted three addendums to NEI 08

-09, Revision 6.

The NRC provided comments to the industry at a public workshop on July 18, 2017, and attached are the two addendums that have been revised to address the NRC's comments. Addendum 2 provides approaches 1 The Nuclear Energy Institute (NEI) is the organization responsible for establishing unified industry policy on matters affecting the nuclear energy industry, including the regulatory aspects of generic operational and technical issues.

NEI's members include all entities licensed to operate commercial nuclear power plants in the United States, nuclear plant designers, major architect/engineering firms, fuel cycle facilities, nuclear materials licensees, and other organizations and entities involved in the nuclear energy industry.

Mr. James W. Andersen July 20 , 201 7 Page 2 to implement the cyber attack detection, response, and recovery. Addendum 4 provides clarification to the cyber security controls documented in NEI 08

-09, Revision 6, Appendix E, Section E.5, "Physical and Operational Environment Protection."

NEI requests that the NRC review and endorse Addendu m s 2 and 4 to NEI 08-09, Revision 6, dated April 2010, as soon as practical to enable use during upcoming inspections

. If any revisions to these document s are desired, please include suggested wording and the technical data to support the proposed change(s).

If you have questions or require additional information, please contact William Gross (202

-739-8123; wrg@nei.org

).

Sincerely, Susan H. Perkins-Grew Attachmen t s c: Mr. James D. Beardsley, NSIR/CSD, NRC NRC Document Control Desk