IR 05000348/2017405

NRC Cyber Security Follow Up Inspection Report 05000348/2017405 and 05000364/2017405). - Letter Only

ML17082A321
Person / Time
Site:	Farley
Issue date:	03/16/2017
From:	Shaeffer S M NRC/RGN-II/DRS/EB2
To:	Madison D Southern Nuclear Operating Co
References
IR 2017405
Download: ML17082A321 (4)

Text

UNITED STATES NUCLEAR REGULATORY COMMISSION REGION II 245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA 30303-1257 March 16, 2017

Dennis Madison

Southern Nuclear Operating Co., Inc.

Joseph M. Farley Nuclear Plant

7388 North State Highway 95 Columbia, AL 36319

SUBJECT: JOSEPH M. FARLEY NUCLEAR PLANT - NRC CYBER SECURITY FOLLOW UP INSPECTION (INSPECTION REPORT 05000348/2017405 and 05000364/2017405

)

Dear Mr. Madison:

On February 3, 2017, the U.S. Nuclear Regulatory Commission (USNRC) completed a cyber security follow up inspection utilizing inspection procedure 71152, "Problem Identification and Resolution (PI&R) for the Joseph M. Farley Nuclear Plant, Units 1 & 2. These inspection activities were conducted at your Southern Nuclear Corporate (SNC) Office, Birmingham, AL and in-office review in Atlanta, GA. On March 11, 2017 the NRC inspectors discussed the results of this inspection with Mr. S. Baskin and other members of your staff. The enclosed inspection report documents the inspection results.

The NRC inspection inspectors reviewed applicable corrective actions and artifacts generated by your staff to correct deficiencies identified during the Interim Cyber Security Milestone 1 - 7 inspections. Based on the inspection sample, the NRC has determined that completed or planned corrective actions were sufficient to address the performance that led to the findings associated with implementing the Cyber Security Plan (CSP).

No findings of more than minor significance were identified. This letter will be made available for public inspection and copying at http://www.nrc.gov/

reading-rm/adams.html and at the NRC Public Document Room in accordance with 10 CFR 2.390, "Public Inspections, Exemptions, Requests for Withholding."

However, the enclosed report contains Security-Related Information, so the enclosed report will not be made publically available in accordance with 10 CFR 2.390(d)(1). If you choose to provide a response that contains Security-Related Information, please mark your entire response "Security-Related Information-Withhold from public disclosure under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1). The NRC is waiving the affidavit requirements for your response in accordance with 10 CFR 2.390(b)(1)(ii).

Sincerely,/RA/ Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Docket Nos.: 50-348 & 50-364 License Nos.: NPF-2 & NPF-8

Enclosure:

Inspection Reports 05000348/2017405 and 05000364/2017405

w/Attachment:

Supplemental Information (OUO)

cc: (See page 3) cc: Stephen P. McGavin, Fleet Security Director

Southern Nuclear Operating Co., Inc.

40 Inverness Center Parkway, Bin B042

Birmingham, AL 35242

Michael P. Long, Fleet Nuclear Security Operations Manager

Southern Nuclear Operating Co., Inc.

40 Inverness Center Parkway

Bin B-042 Birmingham, AL 35242

Steven M. Shipman,

Fleet Security Project Manager

Southern Nuclear Operating Co., Inc. 40 Iverness Center Parkway, BIN B042 Birmingham, AL 35242

_________________________ SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS RII:DRS RII:DRP SIGNATURE RJF2 MJS6 SMS SRS5 NAME RFANNER MSINGLETARY SSHAEFFER SSANDAL DATE 3/14/2017 3/15/2017 3/16/2017 3/15/2017 3/ /2017 3/ /2017 3/ /2017 E-MAIL COPY? YES NO YES NO YES NO YES NO YES NO YES NO YES NO