Letter Sequence RAI |
---|
|
|
MONTHYEARJAFP-10-0075, License Amendment Withdrawal and Request - Cyber Security Plan2010-07-15015 July 2010 License Amendment Withdrawal and Request - Cyber Security Plan Project stage: Other ML1021400902010-08-0202 August 2010 ME4267, Acknowledgment of Withdrawal of LAR Dated November 23, 2009, and Acceptance of Revised LAR Dated July 15, 2010 - Cyber Security Plan Project stage: Withdrawal JAFP-10-0132, Notification Letter Designating Jaf Balance of Plant Systems within the Cyber Security Rule Scope2010-09-27027 September 2010 Notification Letter Designating Jaf Balance of Plant Systems within the Cyber Security Rule Scope Project stage: Request ML1035101282010-12-28028 December 2010 RAI Letter No. 1, Cyber Security Plan Project stage: RAI JAFP-11-0017, Response to Request for Additional Information Regarding Application for Approval of the Cyber Security Plan2011-02-15015 February 2011 Response to Request for Additional Information Regarding Application for Approval of the Cyber Security Plan Project stage: Response to RAI ML1105404572011-02-23023 February 2011 Request for Additional Information Regarding Amendment Application for Approval of the Cyber Security Plan Project stage: RAI ML11060A0312011-03-0303 March 2011 Request for Additional Information Regarding Amendment Application for Approval of the Cyber Security Plan Project stage: RAI JAFP-11-0035, Response to Requests for Additional Information (Rais) and Revision to the Jaf Cyber Security Plan2011-04-0404 April 2011 Response to Requests for Additional Information (Rais) and Revision to the Jaf Cyber Security Plan Project stage: Response to RAI ML1117301402011-06-15015 June 2011 Attachment to E-mail from Alyse Peterson, Ny State Containing Comments on LAR for Cyber Security Plans for Nine Mile Point, Ginna, FitzPatrick, and Indian Point Plants Project stage: Other ML1117300702011-06-15015 June 2011 Ny State Plants-ME4212, ME4213, ME4214, ME4267, and ME4330, ME4331, ME4332-NY State Comments on LARs for Cyber Security Plans for Nine Mile Point, Ginna, FitzPatrick, and Indian Point Plants Project stage: Other ML11152A0112011-08-19019 August 2011 Issuance of Amendment License Amendment Request - Cyber Security Plan Project stage: Approval JAFP-12-0072, License Amendment Request - Cyber Security Plan Implementation Schedule Milestones2012-06-22022 June 2012 License Amendment Request - Cyber Security Plan Implementation Schedule Milestones Project stage: Request JAFP-14-0082, Supplement to Request for Additional Information (RAI) for License Amendment Request - Cyber Security Plan Implementation Schedule2014-07-0202 July 2014 Supplement to Request for Additional Information (RAI) for License Amendment Request - Cyber Security Plan Implementation Schedule Project stage: Supplement ML14202A3722014-12-0101 December 2014 Issuance of Amendment 308 License Amendment Request - Cyber Security Plan Implementation Schedule Milestone 8 Project stage: Approval ML16062A3882016-04-0606 April 2016 Issuance of Amendment No. 311 Cyber Security Plan Implementation Schedule Project stage: Approval JAFP-16-0180, License Amendment Request - Cyber Security Plan Implementation Schedule2016-12-0808 December 2016 License Amendment Request - Cyber Security Plan Implementation Schedule Project stage: Request 2011-04-04
[Table View] |
|
---|
Category:E-Mail
MONTHYEARML24024A1372024-01-24024 January 2024 NRR E-mail Capture - Final Snsb RAI Regarding FitzPatrick Amendment to Modify Safety Relief Valves Setpoint Lower Tolerance ML24017A1112024-01-17017 January 2024 NRR E-mail Capture - Acceptance of Requested Licensing Action Amendment Request to Adopt TSTF-529, Clarifyuse and Applicaion Rules, Revision 4 ML23264A7992023-09-21021 September 2023 NRR E-mail Capture - Final RAI - Constellation Energy Generation, LLC Fleet Request License Amendment Request to Adopt TSTF-580, Revision 1 ML23261C3982023-09-0808 September 2023 Acceptance Review of Amendment to Update the Fuel Handling Accident Analysis ML23244A2662023-09-0101 September 2023 Acceptance of Requested Licensing Action Amendment Request to Modify Surveillance Requirement 3.4.3.1, Safety Relief Valves Setpoint Lower Tolerance ML23237B3972023-08-24024 August 2023 NRR E-mail Capture - Constellation Energy Generation, LLC - Fleet Request - Acceptance of Alternative Request to Use Updated BWRVIP Guidelines ML23194A1822023-08-0303 August 2023 Acceptance Review for LAR Re SRM 3.3.1.2 ML23163A2292023-06-12012 June 2023 NRR E-mail Capture - Constellation Energy Generation, LLC - Fleet Request - Acceptance of License Amendment Request to Adopt TSTF-580, Revision 1 ML22354A2622022-12-20020 December 2022 NRR E-mail Capture - Constellation Energy Generation, LLC - Fleet Request - Acceptance of Request to Use Certain Provisions of the 2019 Edition of the ASME BPV Code, Section XI NRC-2100-2022, EN 55999 Valcor Coil Shell Assemblies Final Notification (004)2022-09-12012 September 2022 EN 55999 Valcor Coil Shell Assemblies Final Notification (004) NRC 2110-2022, EN 55999 - Valcor Engineering Corporation (009)2022-07-18018 July 2022 EN 55999 - Valcor Engineering Corporation (009) ML22124A2672022-05-0404 May 2022 Request for Additional Information for James A. FitzPatrick Nuclear Power Plant TSTF-505 ML22041B5362022-02-10010 February 2022 NRR E-mail Capture - Constellation Energy Generation, LLC - Request for Additional Information Regarding Fleet License Amendment Request to Adopt TSTF-541 ML22020A0642022-01-13013 January 2022 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding Proposed Fleet Alternative for Repair of Water Level Instrumentation Partial Penetration Nozzles ML22063A4742021-11-29029 November 2021 Acceptance of Requested Licensing Action License Amendment Request to Eliminate Selected Response Time Testing ML21301A0672021-10-28028 October 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Acceptance of License Amendment Request to Adopt TSTF-541 ML21256A1902021-09-10010 September 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding License Transfer Application ML21252A0482021-09-0707 September 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Fleet Alternative Request for Repair of Water Level Instrumentation Partial Penetration Nozzles ML21246A2112021-09-0303 September 2021 Acceptance of Requested Licensing Action License Amendment Request to Adopt TSTF-505 ML21246A2072021-09-0303 September 2021 Acceptance of Requested Licensing Action License Amendment Request to Adopt 10 CFR 50.69 ML21215A3502021-08-0303 August 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Acceptance of License Amendment Request to Adopt TSTF-554 ML21187A0522021-07-0606 July 2021 Fitz RAI Regarding FitzPatrick Amendment Request to Modify SR 3.5.1.6 ML21246A2142021-06-23023 June 2021 Acceptance of Requested Licensing Action Regarding License Amendment Request to Adopt TSTF-264 ML21154A0112021-05-28028 May 2021 NRR E-mail Capture - Extension of Comment Period for the Exelon Generation Company, LLC License Transfer Application ML21154A0142021-05-28028 May 2021 NRR E-mail Capture - Extension of Comment Period for the Exelon Generation Company, LLC License Transfer Application ML21154A0132021-05-28028 May 2021 NRR E-mail Capture - Extension of Comment Period for the Exelon Generation Company, LLC License Transfer Application ML21144A2132021-05-24024 May 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding License Transfer Application ML21144A1072021-05-17017 May 2021 Acceptance of Requested Licensing Action License Amendment Request to Adopt TSTF-582 ML21117A0442021-04-26026 April 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Proposed Fleet Alternative to Documentation Requirements for Pressure Retaining Bolting ML21084A2532021-03-24024 March 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Acceptance of License Transfer Application ML21062A0652021-03-0101 March 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding Proposed Fleet Alternative to Documentation Requirements for Pressure Retaining Bolting ML21049A2572021-02-18018 February 2021 Request for Additional Information Byron/Dresden Proposed Changes to Site Emergency Plans to Support Post-Shutdown and Permanently Defueled Conditions (EPID-2020-LLA-0240 & EPID-2020-LLA-0237) ML21033A8552021-02-0202 February 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Fleet Alternative Request to Expand the Use ASME Codes Cases N-878 and N-880 ML21014A5112021-01-12012 January 2021 Acceptance of Requested Licensing Action License Amendment Request to Adopt TSTF-545 Revision 3 ML20352A2752020-12-17017 December 2020 Request for Additional Information Regarding FitzPatrick Primary Containment Isolation Valve Amendment Request ML20350B5582020-12-14014 December 2020 NRR E-mail Capture - Exelon Generation Company, LLC -Alternative Request for Documentation of Replacement of Pressure Retaining Bolting ML20294A0372020-10-19019 October 2020 Request for Additional Information Primary Containment Isolation Valve License Amendment Request ML20266G3032020-09-22022 September 2020 NRR E-mail Capture - Exelon Generation Company, LLC - Fleet Request to Use Paragraph IWA-5120 of the 2017 Edition of the ASME B&PV Code, Section XI ML20217L3882020-08-0404 August 2020 Acceptance of Requested Licensing Action License Amendment Request to Modify Primary Containment Isolation Valve TS (EPID L-2020-LLA-0145) (E-Mail) ML20204A9692020-07-22022 July 2020 Acceptance of Requested Licensing Action License Amendment Request to Adopt-TSTF-478 Revision 2 ML20122A2302020-05-0101 May 2020 NRR E-mail Capture - Exelon Generation Company, LLC - Acceptance of Fleet License Amendment Request to Adopt TSTF-566 ML20066L3682020-03-0505 March 2020 Request for Additional Information: License Amendment Request for Change to the Technical Specifications to Revise the Allowable Value for Reactor Water Cleanup (RWCU) System Primary Containment ML20056E7992020-02-25025 February 2020 Request for Additional Information for LAR on Primary Containment Hydrodynamic Loads ML20035D5762020-02-0303 February 2020 Request for Additional Information: License Amendment Request for Application of the Alternative Source Term for Calculating Loss-of-Coolant Accident Dose Consequence ML20027A0672020-01-24024 January 2020 Accepted for Review - Fitzpatrick License Amendment Request to Adopt TSTF-568, Revision 2, Revise Applicability of BWR/4 TS 3.6.2.5 and TS 3.6.3.2 ML20027A0112020-01-23023 January 2020 Request for Additional Information: License Amendment Request for Change to the Technical Specifications to Revise the Allowable Value for Reactor Water Cleanup (RWCU) System Primary Containment Isolation ML19353A9452019-12-19019 December 2019 Request for Additional Information: License Amendment Request for Application of the Alternative Source Term for Calculating Loss-of-Coolant Accident Dose Consequences ML19319C3582019-11-15015 November 2019 NRR E-mail Capture - Accepted for Review - FitzPatrick License Amendment Request to Revise the Allowable Value for Reactor Water Cleanup (RWCU) System Primary Containment Isolation ML19322A0062019-11-15015 November 2019 NRR E-mail Capture - Fermi 2: Request for Additional Information- Relief Request VRR-006, Proposed Alternative for Preservice Testing of Butterfly Valves ML19316A0162019-11-0404 November 2019 NRR E-mail Capture - Revised Staff Hours Estimate - FitzPatrick License Amendment Request on Proposed Changes to the Technical Specifications Related to Primary Containment Hydrodynamic Loads 2024-01-24
[Table view] Category:Request for Additional Information (RAI)
MONTHYEARML24024A1372024-01-24024 January 2024 NRR E-mail Capture - Final Snsb RAI Regarding FitzPatrick Amendment to Modify Safety Relief Valves Setpoint Lower Tolerance ML24018A0012024-01-18018 January 2024 Notification of Commercial Grade Dedication Inspection (05000333/2024010) and Request for Information ML23264A7992023-09-21021 September 2023 NRR E-mail Capture - Final RAI - Constellation Energy Generation, LLC Fleet Request License Amendment Request to Adopt TSTF-580, Revision 1 ML23164A0322023-06-13013 June 2023 Request for Information for a Biennial Problem Identification and Resolution Inspection; Inspection Report 05000333/2023010 ML22321A0102022-11-17017 November 2022 Notification of Conduct of a Fire Protection Team Inspection ML22124A2672022-05-0404 May 2022 Request for Additional Information for James A. FitzPatrick Nuclear Power Plant TSTF-505 ML22041B5362022-02-10010 February 2022 NRR E-mail Capture - Constellation Energy Generation, LLC - Request for Additional Information Regarding Fleet License Amendment Request to Adopt TSTF-541 ML22020A0642022-01-13013 January 2022 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding Proposed Fleet Alternative for Repair of Water Level Instrumentation Partial Penetration Nozzles ML21256A1902021-09-10010 September 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding License Transfer Application ML21187A0522021-07-0606 July 2021 Fitz RAI Regarding FitzPatrick Amendment Request to Modify SR 3.5.1.6 ML21144A2132021-05-24024 May 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding License Transfer Application ML21062A0652021-03-0101 March 2021 NRR E-mail Capture - Exelon Generation Company, LLC - Request for Additional Information Regarding Proposed Fleet Alternative to Documentation Requirements for Pressure Retaining Bolting ML21049A2572021-02-18018 February 2021 Request for Additional Information Byron/Dresden Proposed Changes to Site Emergency Plans to Support Post-Shutdown and Permanently Defueled Conditions (EPID-2020-LLA-0240 & EPID-2020-LLA-0237) ML21041A1932021-02-10010 February 2021 Request for Information for a Triennial Baseline Design-Basis Capability of Power-Operated Valves Under 10 CFR 50.55a Requirements Inspection; Inspection Report (05000333/2021011) ML20066L3682020-03-0505 March 2020 Request for Additional Information: License Amendment Request for Change to the Technical Specifications to Revise the Allowable Value for Reactor Water Cleanup (RWCU) System Primary Containment ML20056E7992020-02-25025 February 2020 Request for Additional Information for LAR on Primary Containment Hydrodynamic Loads ML20035D5762020-02-0303 February 2020 Request for Additional Information: License Amendment Request for Application of the Alternative Source Term for Calculating Loss-of-Coolant Accident Dose Consequence ML20027A0112020-01-23023 January 2020 Request for Additional Information: License Amendment Request for Change to the Technical Specifications to Revise the Allowable Value for Reactor Water Cleanup (RWCU) System Primary Containment Isolation ML19353A9452019-12-19019 December 2019 Request for Additional Information: License Amendment Request for Application of the Alternative Source Term for Calculating Loss-of-Coolant Accident Dose Consequences ML19322A0062019-11-15015 November 2019 NRR E-mail Capture - Fermi 2: Request for Additional Information- Relief Request VRR-006, Proposed Alternative for Preservice Testing of Butterfly Valves ML19280A0372019-10-0505 October 2019 NRR E-mail Capture - FitzPatrick Revised Request for Additional Information: Emergency Amendment to Extend Completion Time of Transformer to 21 Days ML19280A0392019-10-0505 October 2019 NRR E-mail Capture - FitzPatrick Additional Request for Additional Information: Emergency Amendment to Extend Completion Time of Transformer to 21 Days ML19280A0362019-10-0404 October 2019 NRR E-mail Capture - FitzPatrick Request for Additional Information: Emergency Amendment to Extend Completion Time of Transformer to 21 Days ML19099A2672019-04-16016 April 2019 Use of Encryption Software for Electronic Transmission of Safeguards Information ML19099A2852019-03-12012 March 2019 Draft RAI: FitzPatrick Request to Update Electronic Transmission of Safeguards Information ML19025A1202019-01-24024 January 2019 NRR E-mail Capture - Calvert Cliffs, Fitzpatrick, and Nine Mile Point - Request for Additional Information Regarding License Amendment Request to Revise Emergency Response Organization Staffing ML18353B5112018-12-20020 December 2018 Request for Additional Information Relief Request No. 14R-22, for Fourth 10-Year Inservice Inspection Interval ML18164A3652018-06-13013 June 2018 NRR E-mail Capture - FitzPatrick RAIs - LAR to Adopt EAL Schemes Pursuant to NEI 99-01, Revision 6 ML18094B0922018-04-0505 April 2018 Enclosurequest for Additional Information (Letter to B. S. Ford RAI Regarding Entergy Operations, Inc.'S Decommissioning Funding Plan Update for ISFSI Docket Nos.: 72-43, 72-51, 72-1044, 72-07, 72-12, and 72-59) ML18085A6922018-03-26026 March 2018 NRR E-mail Capture - James A. FitzPatrick Nuclear Power Plant, Unit 1 - Request for Information to Adopt Traveler TSTF-542, RPV Water Inventory Control ML18085A6912018-03-23023 March 2018 NRR E-mail Capture - Draft Request for Information (RAI) for JAFNPP Traveler TSTF-542, RPV Water Inventory Control ML18029A8422018-01-29029 January 2018 NRR E-mail Capture - Request for Additional Information: FitzPatrick License Amendment Request to Revise Technical Specifications to Address Secondary Containment Personnel Access Door Openings ML17335A1002017-11-29029 November 2017 NRR E-mail Capture - FitzPatrick - Request for Additional Information - Relief Request 15R-02 Regarding the Use of BWRVIP Guidelines Instead of ASME Code (CAC: MG0116; EPID: L-2017-LLR-0083) ML17285B1962017-10-27027 October 2017 Request for Additional Information Regarding Generic Letter 2016-01, Monitoring of Neutron-Absorbing Materials in Spent Fuel Pools. ML17228A0052017-08-15015 August 2017 NRR E-mail Capture - Request for Additional Information - St. Lucie Relief Request #3 - Icw 30 Pipe Defect Removal (MF9288) ML16299A0192016-11-0202 November 2016 Request for Additional Information Regarding Direct License Transfer from Entergy to Exelon ML16287A6502016-10-21021 October 2016 Request for Additional Information Regarding: License Amendment Request to Revise Technical Specifications Section 5.5.6 for Extension of Type a and Type C Leak Rate Test Frequencies ML16280A5732016-10-18018 October 2016 Request for Additional Information Relief Request for Proposed Alternative for the Implementation of BWRVIP-05 ML16117A1862016-04-26026 April 2016 Entergy Fleet Relief Request EN-ISI-15-1 Request for Additional Information - 04/26/16 Email from R. Guzman to G. Davant (CAC Nos. MF7133-MF7136) ML16013A0642016-01-13013 January 2016 NRR E-mail Capture - Request for Additional Information Entergy CNRO-2015-00023 - Revision to Entergy Quality Assurance Program Manual (Fleet Submittal CAC Nos. MF7086-MF7097) ML15341A1662015-12-0707 December 2015 NRR E-mail Capture - Entergy Fleet RR-EN-15-1, Request for Additional Information (CACs MF6341-MF6349) ML14240A6122014-09-24024 September 2014 Request for Additional Information Regarding Proposed Changes to the Technical Specification Low Pressure Safety Limit ML14184A6152014-07-25025 July 2014 Request for Additional Information Regarding Proposed Safety Limit Minimum Critical Power Ratio License Amendment ML14195A0972014-07-16016 July 2014 Request for Additional Information Associated with Near-Term Task Force Recommendation 2.1, Seismic Hazard and Screening Report ML14164A5382014-07-0202 July 2014 Request for Additional Information Regarding 10 CFR 50.55A Alternate Request PRR-05 (Tac No. MF3680) ML14093A6772014-05-0101 May 2014 SONGS - Request for Additional Information Concerning Pre-Emption Authority ML13338A6452013-12-12012 December 2013 Interim Staff Evaluation and Request for Additional Information, Regarding the Overall Integrated Plan for Implementation of Order EA-12-051, Reliable Spent Fuel Pool Instrumentation ML13304B4182013-11-0101 November 2013 Request for Additional Information Associated with Near-Term Task Force Recommendation 2.3, Seismic Walkdowns ML13226A5342013-08-29029 August 2013 Request for Additional Information Regarding Overall Integrated Plan for Reliable Spent Fuel Pool Instrumentation (Order EA-12-051) ML13179A4622013-07-0505 July 2013 Entergy Nuclear Operations, Inc., Decommissioning Funding Status Report Request for Additional Information Regarding the Decommissioning Funding Status Report 2024-01-24
[Table view] |
Text
From: Vaidya, Bhalchandra Sent: Wednesday, February 23, 2011 11:21 AM To: 'Dorman, Eugene'; 'Pechacek, Joseph' Cc: Salgado, Nancy; Singal, Balwant; Wengert, Thomas
Subject:
ME4267 - Re: Generic RAIs - LAR for Cyber Security Plan
SUBJECT:
JAMES A. FITZPATRICK NUCLEAR POWER PLANT - REQUEST FOR ADDITIONAL INFORMATION REGARDING AMENDMENT APPLICATION FOR APPROVAL OF THE CYBER SECURITY PLAN (TAC NO. ME4267)
Dear Sir or Madam:
By letter dated July 15, 2010 (Agencywide Documents Access and Management System, Accession No. ML102000012), as supplemented by letters dated September 27, 2010 (ADAMS Accession No. ML102700602), Entergy Nuclear Operations, Inc. (the licensee) resubmitted a request to amend the Facility Operating License (No. DPR-59) for James A. FitzPatrick Nuclear Power Plant (JAF). The licensee requested approval of the JAF Cyber Security Plan (CSP) (ML102000013), provided a proposed CSP Implementation Schedule, and included a proposed revision to the Facility Operating License to incorporate the provisions for implementing and maintaining in effect the provisions of the approved CSP. The licensees amendment request was based on a generic template developed by the Nuclear Energy Institute in concert with the industry.
The U.S. Nuclear Regulatory Commission (NRC) staff is reviewing the CSP and the proposed CSP Implementation Schedule and has determined that additional information is required to complete its technical review. The specific questions are found in the request for additional information (RAI) below:
========================================
Generic Request for Additional Information (RAI)
RAI 1: Records Retention Title 10 of the Code of Federal Regulations (10 CFR) Paragraph 73.54(c)(2) requires licensees to design a cyber security program to ensure the capability to detect, respond to, and recover from cyber attacks. Furthermore, 10 CFR 73.54(e)(2)(i) requires licensees to maintain a cyber security plan that describes how the licensee will maintain the capability for timely detection and response to cyber attacks. The ability for a licensee to detect and respond to cyber attacks requires accurate and complete records and is further supported by 10 CFR 73.54(h), which states that the licensee shall retain all records and supporting technical documentation required to satisfy the requirements of 10 CFR Section 73.54 as a record until the Commission terminates the license for which the records were developed, and shall maintain superseded portions of these records for at least 3 years after the record is superseded, unless otherwise specified by the Commission.
The licensees Cyber Security Plan (CSP) in Section [4.13] states that Critical Digital Asset (CDA) audit records and audit data (e.g., operating system logs, network device logs) are retained for a period of time that is less than what is required by 10 CFR 73.54(h).
Explain the deviation from the 10 CFR 73.54(h) requirement to retain records and supporting technical documentation until the Commission terminates the license (or to maintain superseded portions of these records for at least 3 years) and how that meets the requirements of 10 CFR 73.54.
RAI 2: Implementation Schedule The regulation at 10 CFR 73.54, Protection of digital computer and communication systems and networks, requires licensees to submit a CSP that satisfies the requirements of this section for Commission review and approval. Furthermore, each submittal must include a proposed
implementation schedule and the implementation of the licensees cyber security program must be consistent with the approved schedule. Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat.
The completion of several key intermediate milestones (Items (a) through (g) below) would demonstrate progress toward meeting the requirements of 10 CFR 73.54. The Nuclear Regulatory Commission (NRC) staffs expectation is that the key intermediate milestones will be completed in a timely manner, but no later than December 31, 2012. The key CSP implementation milestones are as follows:
(a) Establish, train and qualify Cyber Security Assessment Team, as described in Section 3.1.2, Cyber Security Assessment Team, of the CSP.
(b) Identify Critical Systems and CDAs, as described in Section 3.1.3, Identification of Critical Digital Assets, of the CSP.
(c) Implement cyber security defense-in-depth architecture by installation of
[deterministic one-way] devices, as described in Section 4.3, Defense-In-Depth Protective Strategies of the CSP.
(d) Implement the management, operational and technical cyber security controls that address attacks promulgated by use of portable media, portable devices, and portable equipment as described in Appendix D Section 1.19 Access Control for Portable and Mobile Devices, of Nuclear Energy Institute (NEI) 08-09, Revision 6.
(e) Implement observation and identification of obvious cyber related tampering to existing insider mitigation rounds as described in Appendix E Section 4.3, Personnel Performing Maintenance and Testing Activities, and Appendix E Section 10.3, Baseline Configuration of NEI 08-09, Revision 6.
(f) Identify, document, and implement cyber security controls to physical security target set CDAs in accordance with Section 3.1.6, Mitigation of Vulnerabilities and Application of Cyber Security Controls, of the CSP.
(g) Ongoing monitoring and assessment activities will commence for those target set CDAs whose security controls have been implemented, as described in Section 4.4, Ongoing Monitoring and Assessment, of the CSP (h) Full implementation of the CSP for all safety, security, and emergency preparedness functions.
Provide a revised CSP implementation schedule that identifies the appropriate milestones, completion dates, supporting rationale, and level of detail to allow the NRC to evaluate the licensees proposed schedule and associated milestone dates which include the final completion date. It is the NRCs intention to develop a license condition incorporating your revised CSP implementation schedule containing the key milestone dates.
RAI 3: Scope of Systems Paragraph 73.54(a) of 10 CFR requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyber attacks, up to and including the design basis threat as described in 10 CFR 73.1. In addition, 10 CFR 73.54(a)(1) states that the licensee shall protect digital computer and communication systems and networks associated with:
(i) Safety-related and important-to-safety functions;
(ii) Security functions; (iii) Emergency preparedness functions, including offsite communications; and (iv) Support systems and equipment which, if compromised, would adversely impact safety, security, or emergency preparedness functions.
Subsequent to the issuance of the cyber security rule, the NRC stated that 10 CFR 73.54 should be interpreted to include structures, systems, and components (SSCs) in the balance of plant (BOP) that have a nexus to radiological health and safety (Agencywide Documents Access and Management System (ADAMS) Accession No. ML103490344, dated November 19, 2010). The SSCs in the BOP are those that could directly or indirectly affect reactivity of a nuclear power plant and could result in an unplanned reactor shutdown or transient and are therefore, within the scope of important-to-safety functions described in 10 CFR 73.54(a)(1). Furthermore, the NRC issued a letter to NEI dated January 5, 2011 (ADAMS Accession No. ML103550480) that provided licensees with additional guidance on one acceptable approach to comply with the Commissions policy determination.
Explain how the scoping of systems provided by [site/licensee]s CSP meets the requirements of 10 CFR 73.54 and the additional guidance provided by the NRC.
=====================================
It is our understanding that the Nuclear Energy Institute and the industry Cyber Security Task Force are working to ensure that operating reactor licensees will submit consistent responses to these generic RAIs to the NRC.
Please contact me to schedule a telephone conference between the NRC staff and the licensee to ensure that the NRC staff concerns are clear to the licensee and also, to obtain a firm commitment date for the response to the RAIs.
Please contact me at (301) 415-3308 if you have any questions.
Bhalchandra K. Vaidya Licensing Project Manager NRC/NRR/DORL/LPL1-1 (301)-415-3308 (O) bhalchandra.vaidya@nrc.gov E-mail Properties Mail Envelope Properties ()
Subject:
ME4267 - Re: Generic RAIs - LAR for Cyber Security Plan Sent Date: 02/23/2011 7:05:02 AM Received Date: 02/23/2011 11:20:00 AM From: Vaidya, Bhalchandra Created By: Bhalchandra.Vaidya@nrc.gov Recipients:
EDorman@entergy.com ('Dorman, Eugene')
Tracking Status: None
JPechac@entergy.com ('Pechacek, Joseph')
Tracking Status: None Nancy.Salgado@nrc.gov (Salgado, Nancy)
Tracking Status: None Balwant.Singal@nrc.gov (Singal, Balwant)
Tracking Status: None Thomas.Wengert@nrc.gov (Wengert, Thomas)
Tracking Status: None Post Office:
Files Size Date & Time MESSAGE 31485 02/23/2011 Options Expiration Date:
Priority: olImportanceNormal ReplyRequested: False Return Notification: False Sensitivity: olNormal Recipients received: