Letter Sequence RAI |
---|
TAC:ME4319, (Approved, Closed) TAC:ME4320, (Approved, Closed) TAC:ME4321, (Approved, Closed) TAC:ME4322, (Approved, Closed) TAC:ME4323, (Approved, Closed) TAC:ME4324, (Approved, Closed) TAC:ME4325, (Approved, Closed) |
|
MONTHYEARML1020100912010-07-12012 July 2010 Units 2 & 3 and North Anna & Surry, Units 1 & 2 - Supplement to Request for Approval of the Cyber Security Plan Project stage: Supplement ML1021602322010-07-29029 July 2010 Regarding ME4319-25, Dominion Fleet Cyber Security Plan Amendment Submittals, with the Addition of ML101900201, Guidance on Implementation Schedule Project stage: Other ML1021602272010-07-29029 July 2010 Regarding ME4319-25, Dominion Fleet Cyber Security Plan Amendment Submittals Project stage: Other ML1021602022010-07-29029 July 2010 ME4319-25 - Dominion Acceptance Conference Call Project stage: Other ML1022102842010-08-0505 August 2010 Supplement to Request for Approval of the Cyber Security Plan Project stage: Supplement ML1026706412010-09-23023 September 2010 Notification Letter Designating Balance of Plant Systems within the Cyber Security Rule Scope Project stage: Request ML1031604222010-11-10010 November 2010 Scope of Systems Clarification Project stage: Request ML1032703572010-11-22022 November 2010 Fleet (Kewaunee, Millstone 2 & 3, North Anna 1 & 2, Surry 1 & 2) Nuclear Plants Email - Cyber Security Plan (License Amendment (TAC No. ME4319, ME4320,4321, ME4322, 4323, and ME4324, 4325) Project stage: Other ML1035600832010-12-13013 December 2010 Response to Request for Additional Information on Cyber Security Plan Project stage: Response to RAI ML1106303592011-03-0707 March 2011 Request for Additional Information Related to License Amendment Request for Approval of Cyber Security Plan Project stage: RAI ML1109606652011-04-0404 April 2011 Cyber Security Plan, Response to Request for Additional Information Project stage: Response to RAI ML11143A0632011-05-17017 May 2011 Submittal of Consolidated Cyber Security Plan and RAI Response Project stage: Other ML11200A2222011-07-19019 July 2011 NRR E-mail Capture - ME4319 - Pertaining to Kewaunee Power Station - State Consultation Project stage: Other ML11222A0832011-08-0404 August 2011 Cyber Security Plan License Condition Project stage: Other ML11192A2492011-08-31031 August 2011 Issuance of Amendment Regarding Cyber Security to Dominion Plants Project stage: Approval ML1120310832011-09-30030 September 2011 Issuance of Amendments Cyber Security Plan Project stage: Approval 2010-09-23
[Table View] |
Request for Additional Information Related to License Amendment Request for Approval of Cyber Security PlanML110630359 |
Person / Time |
---|
Site: |
Millstone, Kewaunee, Surry, North Anna ![Dominion icon.png](/w/images/b/b0/Dominion_icon.png) |
---|
Issue date: |
03/07/2011 |
---|
From: |
Feintuch K Plant Licensing Branch III |
---|
To: |
Heacock D Dominion Energy Kewaunee, Dominion Nuclear Connecticut, Dominion Nuclear North Anna |
---|
Feintuch K, NRR/DORL/LPL3-1, 415-3079 |
References |
---|
TAC ME4319, TAC ME4320, TAC ME4321, TAC ME4322, TAC ME4323, TAC ME4324, TAC ME4325, FOIA/PA-2011-0115 |
Download: ML110630359 (6) |
|
|
---|
Category:Request for Additional Information (RAI)
MONTHYEARML23318A0952023-11-14014 November 2023 Request for Additional Information (E-mail Dated 11/14/2023) LAR to Revise TSs Related to Framatome Gaia Fuel ML23318A1172023-11-13013 November 2023 NRR E-mail Capture - Formal Issuance of RAIs for North Anna Technical Support Center (TSC) License Amendment Request (LAR) (L-2023-LLA-0006) ML23268A4362023-09-21021 September 2023 Extension Date Approval for Request for Additional Information for Exemptions on Site Restoration Activities ML23257A2092023-09-14014 September 2023 NRR E-mail Capture - Formal Issuance of 2nd Round RAIs for Surry Units 1&2 and North Anna Units 1&2 Emergency Plans LAR ML23243A9862023-08-31031 August 2023 NRR E-mail Capture - Draft RAIs for EP Staff Augmentation Times LAR (L-2022-LLA-0166) ML23222A1532023-08-29029 August 2023 Solutions Restore Enclosure RAI 1 - Final ML23219A1602023-08-0707 August 2023 003 Radiation Safety Baseline Inspection Information Request ML23199A2832023-07-18018 July 2023 Request for Additional Information (E-mail Dated 7/18/2023) LAR to Revise the Pressure-Temperature Limits ML23187A1122023-07-0606 July 2023 TSC Relocation LAR RAIs ML23171B0522023-06-20020 June 2023 NRR E-mail Capture - RAI for Review of Appendix F to DOM-NAF-2-P (Redacted) ML23081A5282023-04-26026 April 2023 Request for Additional Information - North Anna Subsequent License Renewal Application Environmental Review ML23089A1882023-03-29029 March 2023 Request for Additional Information (E-mail Dated 3/29/2023) Spring 2022 Steam Generator Tube Inspection Report ML23075A0232023-03-15015 March 2023 NRR E-mail Capture - RAI - License Amend Req (LAR) to Revise Tech Spec (Ts) 3.6.8 Limiting Condition for Operation to Remove Refueling Water Chemical Addition Tank and Replace the Containment Sump Buffer North Anna, 1 and 2 (L-2022-LLA-0162 ML23073A1802023-03-14014 March 2023 Notification of Commercial Grade Dedication Inspection (05000336/2023010 and 05000423/2023010) and Request for Information ML23068A0242023-03-0808 March 2023 RAI Issuance Fuel Handling Trolley LAR ML23060A0932023-03-0101 March 2023 NRR E-mail Capture - Formal Issuance of RAIs for Surry/North Anna Emergency Plans LAR ML23059A2282023-02-28028 February 2023 NRR E-mail Capture - Draft RAIs for Containment Buffer Change to Natb (L-2022-LLA-0162) ML23054A2412023-02-23023 February 2023 NRR E-mail Capture - Formal Issuance of RAIs for Surry Turbine Building Tornado Reclassification ML23046A1172023-02-0202 February 2023 002 Radiation Safety Baseline Inspection Information Request ML23018A1642023-01-17017 January 2023 Formal Issuance of RAIs for Surry ISI Alternative for SG Welds, 30 Day Calendar Response Period (Email) ML22349A2102022-12-15015 December 2022 Formal 43-day Request for Additional Information Issuance for Surry Turbine Building License Amendment Request ML22339A1582022-11-30030 November 2022 Requalification Inspection Notification Letter ML22258A2202022-09-13013 September 2022 FFD RFI ML22251A1292022-09-0909 September 2022 Request for Additional Information Related to Response to Generic Letter 2004-04 ML22242A0452022-08-23023 August 2022 NRR E-mail Capture - Dominion GL 04-02 Response Draft RAIs (L-2017-LRC-0000) ML22223A1192022-08-14014 August 2022 RP Inspection Document Request Letter Final ML22110A2052022-04-19019 April 2022 Formal Issuance of RAIs for Post LOCA Buffer Change LAR ML22083A2102022-03-24024 March 2022 NRR E-mail Capture - Draft RAI - Relief Request N2-14-LMT-003 Fourth Ten Year Inservice Inspection Interval ML22067A1622022-03-0909 March 2022 Notification of Inspection and Request for Information for NRC Problem Identification and Resolution Inspection ML22032A3252022-02-0202 February 2022 Enclosure - Request for Additional Information ML22012A0572022-01-11011 January 2022 Issuance of RAIs for Surry Unit 1, Spring 2021 Steam Generator Tube Inspection ML21327A3652021-11-23023 November 2021 NRR E-mail Capture - Draft RAI for TSTF-577 LAR ML21322A0962021-11-18018 November 2021 Final Request for Additional Information Set 5 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Email ML21322A0992021-11-18018 November 2021 Final Request for Additional Information Set 5 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Enclosure ML21257A0682021-09-30030 September 2021 Request for Additional Information Regarding Application for Order Approving Transfer of Control of Kewaunee Power Station License and Conforming License Amendments ML21257A0692021-09-30030 September 2021 Enclosure - Request for Additional Information - Application for Order Approving Transfer of Control of Kewaunee Power Station License and Conforming License Amendment ML21256A0672021-09-13013 September 2021 Final Request for Confirmation of Information Set 2 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Email ML21256A0692021-09-13013 September 2021 Final Request for Confirmation of Information Set 2 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Request for Confirmation of Information ML21238A0942021-08-25025 August 2021 Draft Request for Additional Information Set Z - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Email ML21238A0982021-08-25025 August 2021 Draft Request for Additional Information Set Z - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Enclosure ML21225A5022021-08-13013 August 2021 Request for Additional Information for North Anna Power Station, Units 1 and 2, Surry Power Station, Units 1 and 2, and Millstone Power Station, Units 2 and 3, Appendix E of Fleet Report Com-Naf-2 (EPID:L02021-LLT-0000) Public Version ML21196A1012021-07-15015 July 2021 Notification of an NRC Fire Protection Team Inspection (FPTI) (NRC Inspection Report 05000280/2021011 and 05000281/2021011) and Request for Information (RFI) ML21195A2442021-07-13013 July 2021 NRR E-mail Capture - Draft RAI Appendix E to Topical Report DOM-NAF-2 Qualification of the Framatome BWU-I CHF Correlation in the Dominion Energy VIPRE-D Computer Code ML21188A1632021-07-0707 July 2021 Final Request for Additional Information Set 4 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Email ML21188A1652021-07-0707 July 2021 Final Request for Additional Information Set 4 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Enclosure ML21182A2902021-07-0101 July 2021 7/1/2021 E-mail - Request for Additional Information Alternative Frequency to Supplemental Valve Position Verification Testing Requirements ML21174A1952021-06-23023 June 2021 Safety RAIs - Set Y - Draft - Enclosure ML21166A3512021-06-15015 June 2021 Safety RAIs - Set 4 - Draft ML21123A2972021-05-0303 May 2021 Final Request for Additional Information Set 3 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - E-mail ML21123A2982021-05-0303 May 2021 Final Request for Additional Information Set 3 - North Anna SLRA Safety Review (EPID No. L-2020-SLR-0000) - Enclosure 2023-09-21
[Table view] Category:Letter
MONTHYEARIR 05000280/20244012024-02-0606 February 2024 Security Baseline Inspection Report 05000280/2024401, 05000281/2024401 and 07200002/2024401 ML24032A1112024-02-0101 February 2024 Owner'S Activity Report for North Anna, Unit 2, Refueling Outage N2R29 - First Period of the Fifth ISI Interval IR 05000336/20234022024-01-30030 January 2024 Security Baseline Inspection Report 05000336/2023402 and 05000423/2023402 (Cover Letter Only) ML24030A7522024-01-30030 January 2024 Technical Specification Bases Pages ML23339A1332024-01-26026 January 2024 Exemption from the Req of 10 CFR Part 50.82(a)(8)(i)(A) to Use the Kewaunee Decommissioning Trust Fund for the Management of Site Restoration Activities IR 05000280/20230102024-01-18018 January 2024 Age Related Degradation Inspection Report 05000280-2023010 and 05000281-2023010 ML23312A1922024-01-18018 January 2024 Issuance of Amendment Nos. 316 & 316 Regarding a Risk Informed Approach for Tornado Classification of the Fuel Handling Trolley Support Structure ML24032A4662024-01-16016 January 2024 Response to Comments on Draft Vpdes Permit No. VA0052451 ML23341A0172024-01-12012 January 2024 Issuance of Amendment No. 288 Revision to Applicability Term for Reactor Coolant System Heatup and Cooldown Pressure-Temperature Limitations Figures IR 05000336/20234402024-01-11011 January 2024 Special Inspection Report 05000336/2023440 and 05000423/2023440 (Cover Letter Only) ML24017A0802024-01-11011 January 2024 Notification of Licensed Operator Initial Examination 05000338/2024301 and 05000339/2024301 ML23332A7272024-01-0909 January 2024 Notice of Availability of the Draft Site-Specific Environmental Impact Statement for the North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8352024-01-0909 January 2024 Letter to Acee Watt, Thpo, United Keetoowah Band of Cherokee Indians in Oklahoma Re Notice of Availability of the Draft Site-Specific Environmental Impact Statement for North Anna Power Station Subsequent License Renewal ML24003A8362024-01-0909 January 2024 Notice of Availability of the Draft Site-Specific Environmental Impact Statement for the North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8372024-01-0909 January 2024 Letter to Elizabeth Toombs, Thpo, Cherokee Nation, Notice of Availability of the Draft Site-Specific EIS for North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8382024-01-0909 January 2024 Letter to G. Anne Richardson, Chief, Rappahannock Tribe, Inc., Notice of Availability of Draft Site-Specific Environmental Impact Statement for North Anna Power Station Units 1 and 2, Subsequent License Renewal ML24003A8392024-01-0909 January 2024 Letter to Gerald Stewart, Chief, Chickahominy Indian Tribe, Eastern Division Re Re Notice of Availability of the Draft Site-Specific Environmental Impact Statement for North Anna Power Station Subsequent License Renewal ML24003A8402024-01-0909 January 2024 Letter to Katelyn Lucas, Thpo, Delaware Nation, Oklahoma, Notice of Availability of Draft Site-Specific Environmental Impact Statement for North Anna Power Station Units 1 and 2, Subsequent License Renewal ML24003A8412024-01-0909 January 2024 Notice of Availability of the Draft Site-Specific Environmental Impact Statement for the North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8422024-01-0909 January 2024 Letter to Paul Barton, Thpo, Eastern Shawnee Tribe of Oklahoma, Notice of Availability of Draft Site-Specific Environmental Impact Statement for North Anna Power Station Units 1 and 2, Subsequent License Renewal ML24003A8432024-01-0909 January 2024 Letter to Robert Gray, Chief, Pamunkey Indian Tribe, Notice of Availability of the Draft Site-Specific EIS for North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8442024-01-0909 January 2024 Letter to Russell Townsend, Thpo, Eastern Band of Cherokee Indians ML24003A8452024-01-0909 January 2024 Letter to Stephen Adkins, Chief, Chickahominy Indian Tribe, Notice of Availability of Draft Site-Specific Environmental Impact Statement for North Anna Power Station Units 1 and 2, Subsequent License Renewal ML24003A8462024-01-0909 January 2024 Notice of Availability of the Draft Site-Specific Environmental Impact Statement for the North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8472024-01-0909 January 2024 Letter to Tom Jonathan, Chief, Tuscarora Nation, Notice of Availability of the Draft Site-Specific EIS for North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8482024-01-0909 January 2024 Notice of Availability of the Draft Site-Specific Environmental Impact Statement for the North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML24003A8492024-01-0909 January 2024 Letter to W. Frank Adams, Chief, Upper Mattaponi Tribe Re Re Notice of Availability of the Draft Site-Specific Environmental Impact Statement for North Anna Power Station Subsequent License Renewal ML24003A8502024-01-0909 January 2024 Letter to Wenonah Haire, Thpo, Catawba Indian Nation, Notice of Availability of the Draft Site-Specific EIS for North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML23332A0872024-01-0404 January 2024 Notice of Availability of the Draft Site-Specific Environmental Impact Statement for the North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML23332A1852024-01-0404 January 2024 Notice of Availability of the Draft Site-Specific Environmental Impact Statement for the North Anna Power Station, Units 1 and 2, Subsequent License Renewal ML23360A6352024-01-0404 January 2024 Letter to Dominion Availability for North Anna Units 1 and 2 Draft Site Specific Environmental Impact Statement ML24004A1052024-01-0404 January 2024 Request for Information for a Biennial Problem Identification and Resolution Inspection; Inspection Report 05000336/2024010 & 05000423/2024010 ML24003A9022024-01-0303 January 2024 Stations, Units 1 and 2, Emergency Plan Revision - Relocation of the Technical Support Center (TSC) - Editorial Correction IR 05000280/20233012023-12-28028 December 2023 NRC Operator License Examination Report 05000280/2023301 and 05000281/2023301 IR 05000305/20230022023-12-27027 December 2023 NRC Inspection Report 05000305/2023002 (Drss); 07200064/2023001 (Drss) ML23361A0942023-12-21021 December 2023 Response to Request for Additional Information Regarding Proposed License Amendment Request to Revise Technical Specifications for Reactor Core Safety Limits, Fuel Assemblies and Core Operating Limits Report . ML23332A1472023-12-21021 December 2023 Issuance of Environmental Scoping Summary Report Associated with the Staff'S Review of the North Anna Power Station, Units 1 and 2, Subsequent License Renewal Application ML23361A0312023-12-20020 December 2023 Intent to Pursue Subsequent License Renewal ML23283A3052023-12-20020 December 2023 Review of Appendix F to DOM-NAF2, Qualification of the Framatome ORFEO-GAIA and ORFEO-NMGRID CHF Correlations in the Dominion Energy VIPRE-D Computer Code (EPID L-2022-LLT-0003) (Nonproprietary) ML23352A0202023-12-18018 December 2023 Senior Reactor and Reactor Operator Initial License Examinations ML23352A3692023-12-18018 December 2023 Associated Independent Spent Fuel Storage Installation, Revision to Emergency Plan Report of Change 2024-02-06
[Table view] |
Text
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555*0001 March 7, 2011 Mr. David A. Heacock President and Chief Nuclear Officer Dominion Nuclear 5000 Dominion Blvd.
Glen Allen, VA 23060-6711
SUBJECT:
KEWAUNEE POWER STATION, MILLSTONE POWER STATION UNITS 2 AND 3, NORTH ANNA POWER STATION UNITS 1 AND 2, SURRY POWER STATION UNITS 1 AND 2 - REQUEST FOR ADDITIONAL INFORMATION RELATED TO LICENSE AMENDMENT REQUEST FOR APPROVAL OF CYBER SECURITY PLAN (TAC NOS. ME4319, ME4320, ME4321, ME4322, ME4323, ME4324, AND ME4325)
Dear Mr. Heacock:
By letter to the U.S. Nuclear Regulatory Commission (NRC) dated November 20, 2009 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML093360247), as supplemented by letters dated July 12, 2010 (ADAMS Accession No. ML102010091), August 5,2010 (ADAMS Accession No. ML102210284), September 23, 2010 (ADAMS Accession No. ML102670641), November 10,2010 (ADAMS Accession No. ML103160422) and December 13,2010 (ADAMS Accession No. ML103560083), Dominion Electric Kewaunee, Inc., Dominion Nuclear Connecticut, Inc., and Virginia Electric and Power Company (collectively, the Dominion licensees) submitted amendments requesting NRC approval of a common fleet Cyber Security Plan.
The NRC staff is reviewing your submittal and has determined that additional information is required to complete the review. By monitored fax transmission on February 22, 2011, the draft Request for Additional Information (RAI) items were sent to Margaret Earle, a member of your staff.
Subsequent to that transmittal we are confirming that those RAI items (see Enclosure) are the final version to which to respond and that the requested date for the response is 30 days after the date of this letter (or the first workday thereafter, if the date falls on a weekend). The enclosed RAI items were reviewed in accordance with the guidance provided in 10 CFR Section 2.390. The NRC staff has determined that no security related or proprietary information is contained therein. Further, it was agreed that you would include the full text of each RAI item with your response as a record of these RAI items.
D. Heacock -2 The NRC staff considers that timely responses to requests for additional information help ensure that sufficient time is available for staff review and contribute toward the NRC's goal of efficient and effective use of staff resources. If circumstances result in the need to revise the requested response date, please contact me at (301) 415-3079.
Sincerely, Karl D. Feintuch, Project Manager Plant Licensing Branch 111-1 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-305, 50-336, 50-423, 50-338, 50-339, 50-280, and 50-281
Enclosure:
As stated cc w/encl: Distribution via ListServ
REQUEST FOR ADDITIONAL INFORMATION (RAI)
REGARDING APPROVAL OF THE CYBER SECURITY PLAN KEWAUNEE POWER STATION, MILLSTONE POWER STATION UNITS 2 AND 3, NORTH ANNA POWER STATION UNITS 1 AND 2.
SURRY POWER STATION UNITS 1 AND 2 DOCKET NOS. 50-305, 50-336, 50-423. 50-338, 50-339, 50-280, AND 50-281 RAI 1: Records Retention Title 10 of the Code of Federal Regulations (10 CFR) Paragraph 73.54(c)(2) requires licensees to design a cyber security program to ensure the capability to detect, respond to, and recover from cyber attacks. Furthermore, 10 CFR 73.54(e)(2)(i) requires licensees to maintain a cyber security plan that describes how the licensee will maintain the capability for timely detection and response to cyber attacks. The ability for a licensee to detect and respond to cyber attacks requires accurate and complete records and is further supported by 10 CFR 73.54(h), which states that the licensee shall retain all records and supporting technical documentation required to satisfy the requirements of 10 CFR Section 73.54 as a record until the Commission terminates the license for which the records were developed, and shall maintain superseded portions of these records for at least 3 years after the record is superseded, unless otherwise specified by the Commission.
The licensee's Cyber Security Plan (CSP) in Section 4.13 states that Critical Digital Asset (CDA) audit records and audit data (e.g., operating system logs, network device logs) are retained for a period of time that is less than what is required by 10 CFR 73.54(h}.
Explain the deviation from the 10 CFR 73.54(h} requirement to retain records and supporting technical documentation until the Commission terminates the license (or to maintain superseded portions of these records for at least 3 years) and how that meets the requirements of 10 CFR 73.54.
RAI 2: Implementation Schedule The regulation at 10 CFR 73.54, "Protection of digital computer and communication systems and networks," requires licensees to submit a CSP that satisfies the requirements of this section for Commission review and approval. Furthermore, each submittal must include a proposed implementation schedule and the implementation of the licensee's cyber security program must be consistent with the approved schedule. Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat.
Enclosure
- 2 The completion of several key intermediate milestones (Items (a) through (g) below) would demonstrate progress toward meeting the requirements of 10 CFR 73.54. The Nuclear Regulatory Commission (NRC) staff's expectation is that the key intermediate milestones will be completed in a timely manner, but no later than December 31, 2012. The key CSP implementation milestones are as follows:
(a) Establish, train and qualify Cyber Security Assessment Team, as described in Section 3.1.2, "Cyber Security Assessment Team," of the CSP (b) Identify Critical Systems and CDAs, as described in Section 3.1.3, "Identification of Critical Digital Assets," of the CSP.
(c) Implement cyber security defense-in-depth architecture by installation of
[deterministic one-way devices], as described in Section 4.3, "Defense-In-Depth Protective Strategies" of the CSP.
(d) Implement the management, operational and technical cyber security controls that address attacks promulgated by use of portable media, portable devices, and portable equipment as described in Appendix D Section 1.19 "Access Control for Portable and Mobile Devices," of Nuclear Energy Institute (NEI) 08-09, Revision 6.
(e) Implement observation and identification of obvious cyber related tampering to existing insider mitigation rounds as described in Appendix E Section 4.3, "Personnel Performing Maintenance and Testing Activities," and Appendix E Section 10.3, "Baseline Configuration" of NEI 08-09, Revision 6.
(f) Identify, document, and implement cyber security controls to physical security target set CDAs in accordance with Section 3.1.6, "Mitigation of Vulnerabilities and Application of Cyber Security Controls," of the CSP.
(g) Ongoing monitoring and assessment activities will commence for those target set CDAs whose security controls have been implemented, as described in Section 4.4, "Ongoing Monitoring and Assessment," of the CSP.
(h) Full implementation of the CSP for all safety, security, and emergency preparedness functions.
Provide a revised CSP implementation schedule that identifies the appropriate milestones, completion dates, supporting rationale, and level of detail to allow the NRC to evaluate the licensee's proposed schedule and associated milestone dates which include the final completion date. It is the NRC's intention to develop a license condition incorporating your revised CSP implementation schedule containing the key milestone dates.
RAI 3: Scope of Systems Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat as described in 10 CFR 73.1. In addition,
-3 10 CFR 73.54(a)( 1) states that the licensee shall protect digital computer and communication systems and networks associated with:
(i) Safety-related and important-to-safety functions; (ii) Security functions; (iii) Emergency preparedness functions, including offsite communications; and (iv) Support systems and equipment which, if compromised, would adversely impact safety, security, or emergency preparedness functions.
Subsequent to the issuance of the cyber security rule, the NRC stated that 10 CFR 73.54 should be interpreted to include structures, systems, and components (SSCs) in the balance of plant (BOP) that have a nexus to radiological health and safety (Agencywide Documents Access and Management System (ADAMS) Accession No. ML103490344, dated November 19, 2010). The SSCs in the BOP are those that could directly or indirectly affect reactivity of a nuclear power plant and could result in an unplanned reactor shutdown or transient and are therefore, within the scope of important-to-safety functions described in 10 CFR 73.54(a)(1).
Furthermore, the NRC issued a letter to NEI dated January 5, 2011 (ADAMS Accession No. ML103550480) that provided licensees with additional guidance on one acceptable approach to comply with the Commission's policy determination.
Explain how the scoping of systems provided by licensee's CSP meets the requirements of 10 CFR 73.54 and the additional guidance provided by the NRC.
D. Heacock -2 The NRC staff considers that timely responses to requests for additional information help ensure that sufficient time is available for staff review and contribute toward the NRC's goal of efficient and effective use of staff resources. If circumstances result in the need to revise the requested response date, please contact me at (301) 415-3079.
Sincerely,
/RA/
Karl D. Feintuch, Project Manager Plant Licensing Branch 111-1 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation Docket Nos. 50-305, 50-336, 50-423, 50-338, 50-339, 50-280, and 50-281
Enclosure:
As stated cc w/encl: Distribution via ListServ DISTRI BUTION:
PUBLIC LPL3-1 R/F Ridsl\lrrDorlDpr Resource PPederson, NSIR RidsNrrDorlLpl3-1 Resource RidsAcrsAcnw_MailCTR Resource RidsNRRPMMilstone Resource RidsNRRPMKewaunee Resource RidsOgcRp Resource RidsNRRPMNorthAnna Resource RidsNrrLABTully Resource RidsRgn3MailCenter Resource RidsNRRPMSurry Resource ADAMS Accession Number* ML110630359 *via memo dated 2/18/11 OFFICE LPL3-1/PM LPL3-1/LA NSIR/DSP/ISCPB/BC LPL3-1/BC NAME KFeintuch BTuily CErlanger* RPascarelli DATE 03/04/11 03/04/11 02/18/11 03/07/11 OFFICIAL RECORD COpy