ML14021A097

Notification of Cyber Security Ti Milestones 1-7 Inspection and Request for Information (NRC Inspection Report No. 05000250-14-404 and 05000251-14-404)

ML14021A097
Person / Time
Site:	Turkey Point
Issue date:	01/16/2014
From:	Scott Shaeffer NRC/RGN-II/DRS/EB2
To:	Nazar M Florida Power & Light Co
References
IR-14-404
Download: ML14021A097 (6)

See also: IR 05000250/2014404

Text

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

UNITED STATES

NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200

ATLANTA, GEORGIA 30303-1257

January 16, 2014

Mr. Mano Nazar

Executive Vice President

and Chief Nuclear Officer

Florida Power and Light Company

P.O. Box 14000

Juno Beach, FL 33408-0420

SUBJECT: TURKEY POINT NUCLEAR POWER PLANT - NOTIFICATION OF CYBER

SECURITY TI MILESTONES 1-7 INSPECTION AND REQUEST FOR

INFORMATION (NRC INSPECTION REPORT NO. 05000250/2014404 AND

05000251/2014404)

Dear Mr. Nazar:

The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)

Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements

specified by the conditions of your operating license at the Turkey Point Nuclear Plant Units 3 &

4, on May 19 - 23, 2014. The inspection team will be led by Mr. Rodney Fanner, Reactor

Inspector, of the NRC RII office. The team will be composed of personnel from the NRC RII

office and personnel from the NRC office of Nuclear Security and Incident Response (NSIR).

The inspection will be conducted in accordance with Temporary Instruction (TI) 2201/004,

Inspection of Implementation of Interim Cyber Security Milestones 1-7. The TI inspection will

be performed to evaluate and verify your ability to meet the interim milestone requirements of

the NRCs Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73,

Section 54, Protection of Digital Computer and Communication Systems and Networks.

During a telephone conversation on January 13, 2014, Mr. Fanner confirmed with Mr. P. Czaya

of your staff, arrangements for an information-gathering site visit and a one-week onsite

inspection. The schedule is as follows:

• Information gathering visit: April 29 - May 1, 2014

• Onsite inspection: May 19 - 23, 2014

The purpose of the information gathering visit is to: (1) obtain information and documentation

needed to support the TI inspection; (2) become familiar with the Turkey Point Nuclear Power

Plant Cyber Security Program and plant layout; and (3) arrange administrative details, such as

Enclosure transmitted herewith contains SUNSI. When separated from enclosure, this

transmittal document is decontrolled

LIMITED INTERNAL

DISTRIBUTION PERMITTED

OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

M. Nazar 2

office space, availability of knowledgeable office personnel and to ensure unescorted site

access privileges.

In order to assure a productive TI inspection, we have enclosed a request for documents

needed to ensure the inspectors are adequately prepared. These documents have been

divided into three groups (I, II, & III). Group I lists information necessary to aid the inspectors in

planning for the TI inspection prior to the information gathering visit. It is requested that this

information be provided to the lead inspector via mail no later than April 18, 2014. Group II lists

information and possible areas for discussion necessary to assist the inspectors during the

TI inspection. It is requested this information be available during the information gathering visit

April 29, 2014. Group III consists of those items that the inspectors will review, or need access

to, during the TI inspection. Group III also lists the information necessary to aid the inspectors

in tracking questions and answers identified as a result of the TI inspection. It is requested that

this information be provided to the lead inspector as the information is generated during the

TI inspection. It is important that all of these documents are up to date and complete in order to

minimize the number of additional documents requested during the preparation and/or the

onsite portions of the TI inspection.

This letter does not contain new or amended information collection requirements subject to the

Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection

requirements were approved by the Office of Management and Budget, control number 3150-

0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a

request for information or an information collection requirement unless the requesting document

displays a currently valid Office of Management and Budget control number.

Your cooperation and support during this inspection will be appreciated. If you have questions

concerning this inspection, or the inspection team's information or logistical needs, please

contact Mr. Fanner at (404) 997-4638, or me at (404) 997-4521.

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

M. Nazar 3

In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be

available electronically for public inspection in the NRC Public Document Room or from the

Publicly Available Records (PARS) component of NRC's document system, ADAMS.

ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the

Public Electronic Reading Room). However, because of the security-related concerns

contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters

enclosure will not be available for public inspection.

Sincerely,

/RA/

Scott M. Shaeffer, Chief

Engineering Branch 2

Division of Reactor Safety

Docket Nos.: 50-250, 50-251

License Nos.: DPR-31, DPR-41

Enclosure: Document Request For Cyber Security

Temporary Instruction (TI) 2201/004 Interim

Milestones 1-7 Inspection

(OFFICIAL USE ONLY)

cc: (See page 4)

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

_ML14021A097__________ x SUNSI REVIEW COMPLETE G FORM 665 ATTACHED

OFFICE RII:DRS RII:DRS

SIGNATURE RJF2 SMS

NAME RFANNER SSHAEFFER

DATE 1/16/2014 1/ 16/2014 1/ /2014 1/ /2014 1/ /2014 1/ /2014 1/ /2014

E-MAIL COPY? YES NO YES NO YES NO YES NO YES NO YES NO YES NO

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

M. Nazar 4

cc:

Michael Kiley

Site Vice President

Turkey Point Nuclear Power Plant

P.O. Box 14000

Juno Beach, FL 33408-0420

Robert Tomonto

Licensing Manager

Turkey Point Nuclear Power Plant

P.O. Box 14000

Juno Beach, FL 33408-0420

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

Letter to Mano Nazar from Scott Shaeffer dated Janaury 16, 2014

SUBJECT: TURKEY POINT NUCLEAR PLANT - NOTIFICATION OF CYBER SECURITY TI

MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC

INSPECTION REPORT NO. 05000250/2014404 AND 05000251/2014404)

Distribution:

RidsNrrPMTurkey Point

C. Evans, RII EICS

L. Douglas, RII EICS

G. West, NSIR (hard copy w/ encl)

RIDSNRRDIRS

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION