ML22356A293

Information Request for the Cyber Security Baseline Security Inspection, Notification to Perform Inspection

ML22356A293
Person / Time
Site:	Vogtle
Issue date:	12/23/2022
From:	Gerald Mccoy NRC/RGN-II
To:	Whitley B Southern Nuclear Operating Co
References
Download: ML22356A293 (3)

Text

December 23, 2022 Brian H. Whitley Nuclear Development Regulatory Affairs Director Southern Nuclear Operating Co., Inc.

3535 Colonnade Parkway Birmingham, AL 35243

SUBJECT:

VOGTLE NUCLEAR PLANT, UNIT 3 - INFORMATION REQUEST FOR THE CYBER SECURITY BASELINE SECURITY INSPECTION, NOTIFICATION TO PERFORM INSPECTION

Dear Brian Whitley:

On February 27, 2023, the U.S. Nuclear Regulatory Commission (NRC) will begin a baseline security inspection in accordance with Inspection Procedure (IP) 81000.09 Cyber Security Inspection for Construction, dated September 20, 2016 at the Vogtle Nuclear Plant, Unit 3. The inspection will be performed to evaluate and assess the requirements of the NRCs Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73, Section 54, Protection of Digital Computer and Communication Systems and Networks. The onsite portion of the inspection will take place during the weeks of February 27, 2023, thru March 17, 2023.

In a letter to Michael Yox dated December 6, 2019, accession number ML19347B193, the NRC informed you of a cyber security inspection which was scheduled for March 30, 2020. This letter included a request for information to aid in the inspection process. As part of this notification, it is requested that the information previously provided be updated to the most current revisions available. In addition, provide any requested information that has not yet been provided.

The first group of requested documents from the initial letter specifies information that was necessary to assist the inspection team in choosing the focus areas (i.e., sample set) to be inspected by the cyber security IP. This information should be made available via secure site (i.e., SharePoint, Certrec) no later than January 26, 2023. The inspection team will review this information and determine if any changes to the sample selection is needed.

The second group of additional requested documents will assist the inspection team in the evaluation of the critical systems and critical digital assets (CSs/CDAs), defensive architecture, and the areas of the licensees CSP selected for the cyber security inspection. This information should be made available for review via secure site (i.e., SharePoint, Certrec) before February 13, 2023.

B. Whitley 2 The third group of requested documents consists of those items that the inspection team will review, or need access to, during the inspection. Please have this information available by the first day of the onsite inspection, February 27, 2023.

The fourth group of information is necessary to aid the inspection team in tracking issues identified during or as a result of the inspection. It is requested that this information be provided to the lead inspector as the information is generated during the inspection. It is important that all of these documents are kept up to date and complete in order to minimize the number of additional documents requested during the preparation and/or the onsite portions of the inspection.

The lead inspector for this inspection is Mr. Philipp Braaten. We understand that our contact for this inspection is Nathan Chapman of your organization. If there are any questions about the inspection or the material requested, please contact the lead inspector at 404-997-4651 or via e-mail at Philipp.braaten@nrc.gov or Laura Pearson at 404-997-4626.

This letter does not contain new or amended information collection requirements subject to the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection requirements were approved by the Office of Management and Budget under control number 3150-0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a request for information or an information collection requirement unless the requesting document displays a currently valid Office of Management and Budget control number.

This letter and its enclosure will be made available for public inspection and copying at http://www.nrc.gov/reading-rm/adams.html and at the NRC Public Document Room in accordance with 10 CFR 2.390, Public Inspections, Exemptions, Requests for Withholding.

Your cooperation and support during this inspection will be appreciated.

Sincerely, Signed by McCoy, Gerald on 12/23/22 Gerald McCoy, Chief Engineering Branch 2 Division of Reactor Safety Docket Nos.: 52-025 License Nos.: NPF-91

ML22356A293 x Non-Sensitive x Publicly Available x SUNSI Review Sensitive Non-Publicly Available OFFICE RII/DRS RII/DRS NAME P. Braaten G. McCoy DATE 12/22/2022 12/23/2022