IR 05000321/2017405

Edwin I. Hatch Nuclear Plant - NRC Cyber Security Follow Up Inspection (Inspection Report 05000321/2017405 and 05000366/2017405) - Letter Only

ML17081A502
Person / Time
Site:	Hatch
Issue date:	03/16/2017
From:	Shaeffer S M NRC/RGN-II/DRS/EB2
To:	Vineyard D R Southern Nuclear Operating Co
References
IR 2017405
Download: ML17081A502 (4)

Text

March 16, 2017

Mr. David Vice President Southern Nuclear Operating Company, Inc.

Edwin I. Hatch Nuclear Plant 11028 Hatch Parkway North Baxley, GA 31513

SUBJECT: EDWIN I. HATCH NUCLEAR PLANT - NRC CYBER SECURITY FOLLOW UP INSPECTION (INSPECTION REPORT 05000321/2017405 and 05000366/2017405)

Dear Mr. Vineyard:

On February 3, 2017, the U.S. Nuclear Regulatory Commission (USNRC) completed a cyber security follow up inspection utilizing inspection procedure 71152, "Problem Identification and Resolution (PI&R) for the Edwin I. Hatch Nuclear Plant, Units 1 & 2. These inspection activities were conducted at your Southern Nuclear Corporate (SNC) Office, Birmingham, AL and in-office review in Atlanta, GA. On March 11, 2017 the NRC inspectors discussed the results of this inspection with Mr. S. Baskin and other members of your staff. The enclosed inspection report documents the inspection results.

The NRC inspection team reviewed applicable corrective actions and artifacts generated by your staff to correct deficiencies identified during the Interim Cyber Security Milestone 1 - 7 inspections. Based on the inspection sample, the NRC has determined that completed or planned corrective actions were sufficient to address the performance that led to the findings associated with implementing the Cyber Security Plan (CSP). No findings of more than minor significance were identified. This letter will be made available for public inspection and copying at http://www.nrc.gov/ reading-rm/adams.html and at the NRC Public Document Room in accordance with 10 CFR 2.390, "Public Inspections, Exemptions, Requests for Withholding."

However, the enclosed report contains Security-Related Information, so the enclosed report will not be made publically available in accordance with 10 CFR 2.390(d)(1). If you choose to provide a response that contains Security-Related Information, please mark your entire response "Security-Related Information-Withhold from public disclosure under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1). The NRC is waiving the affidavit requirements for your response in accordance with 10 CFR 2.390(b)(1)(ii).

Sincerely,/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety Docket Nos.: 50-321, 50-366 License Nos.: DPR-57 and NPF-5

Enclosure:

Inspection Reports 05000321/2017405 and 05000366/2017405

w/Attachment:

Supplemental Information (OUO) cc: (See page 3)