ML13232A258

Diablo Canyon, Units 1 and 2 - Redacted Letter, Audit Report for 2/11-2/14/13 NRC Cyber Security Pilot Study, at the Plant Site in Avila Beach, CA, to Support Digital Replacement of Process Protection System License Amendment Request

ML13232A258
Person / Time
Site:	Diablo Canyon
Issue date:	09/17/2013
From:	Rankin J K Plant Licensing Branch IV
To:	Halpin E D Pacific Gas & Electric Co
Rankin J K
References
TAC ME7522, TAC ME7523
Download: ML13232A258 (3)

Text

OFFICIAL USE ONLY SECbJRITY RlilATIiD INFORMATION UNITED NUCLEAR REGULATORY WASHINGTON, D.C. 20555-0001 September 17, 2013 Mr. Edward D. Halpin Senior Vice President and Chief Nuclear Officer Pacific Gas and Electric Company Diablo Canyon Power Plant P.O. Box 56, Mail Code 104/6 Avila Beach, CA 93424 DIABLO CANYON POWER PLANT, UNIT NOS. 1 AND 2 -REGULATORY AUDIT ON FEBRUARY 11-14, 2013, FOR THE CYBER SECURITY PILOT STUDY AT THE CS INNOVATIONIWESTINGHOUSE FACILITY IN SCOTTSDALE, ARIZONA (TAC NOS. ME7522 AND ME7523)

Dear Mr. Halpin:

By letter dated October 26, 2011, as supplemented by letters dated December 20, 2011, and April 2, April 30, June 6, August 2, September 11, November 27, and December 5,2012, and March 25, April 30, May 9, and May 30, 2013 (Agencywide Documents Access and Management System (ADAMS) Accession Nos. ML 113070457, ML 113610541, ML 12094A072, ML 12131A513, ML 12170A837, ML 12222A094, ML 12256A308, ML 13004A468, ML 12342A149, ML 13093A311, ML 13121A089, ML 13130A059, and ML 13154A049, respectively),

Pacific Gas and Electric (PG&E, the licensee),

submitted a license amendment request (LAR) to the U.S. Nuclear Regulatory Commission (NRC). The proposed LAR would provide a digital replacement of the Process Protection System (PPS) portion of the Reactor Trip System and Engineered Safety Features Actuation System at Diablo Canyon Power Plant, Units 1 and 2 (DCPP). To support the NRC review, staff from the Office of Nuclear Security and Incident Response (NSIR), Cyber Security and Integrated Response Branch, is conducting a pilot study to determine if security measures taken by the licensee and vendor address regulatory requirements for cyber security under Title 10 of the Code of Federal Regulations Section 73.54, "Protection of digital computer and communication systems and networks."

As part of this study, the staff visited CS InnovationslWestinghouse (CSI) facilities in Scottsdale,

Arizona, on February 11-14, 2013. A regulatory audit report outlining NRC staff observations from this visit is enclosed.

A summary audit report will be developed at a later date that details the results of all audits conducted as part of the pilot study and follow-on reviews (subsequent audits related to the PPS replacement) conducted by NSIR staff for other design elements associated with the PPS replacement.

The Enclosure to this letter contains Security-Related Information.

Upon separation from the Enclosure, this letter is DECONTROLLED.

OFFICIAl bJSE ONlY SECbJRITY RlilATIiD INFORMATION OFFICIAL USE ONLY SECURITY RELATED INFORMATION E. Halpin -The lifecycle processes review activities performed in conjunction with this audit are documented in a separate proprietary report that is being written by the staff from the NRC's Office of Nuclear Reactor Regulation (NRR) Instrumentation and Controls Branch. If you have any questions, please contact me at 301-415-1530 or via e-mail at Jennivine.

Rankin@nrc.gov.

Sincerely, Jennie K. Rankin, Project Manager Plant licensing Branch IV Division of Operating Reactor licensing Office of Nuclear Reactor Regulation Docket Nos. 50-275 and 50-323

Enclosure:

As stated cc (letter only): Distribution via listserv OFFICIAL USE ONLY SECURITY RELATED OFFICIAL USE ONLY SECURITY RELATED E. Halpin The lifecycle processes review activities performed in conjunction with this audit are documented in a separate proprietary report that is being written by the staff from the NRC's Office of Nuclear Reactor Regulation (NRR) Instrumentation and Controls Branch. If you have any questions, please contact me at 301-415-1530 or via e-mail at Jennivine.Rankin@nrc.gov

. Docket Nos. 50-275 and 50-323

Enclosure:

As stated cc (letter only): Distribution via Listserv DISTRIBUTION:

PUBLIC LPL4 RlF RidsAcrsAcnw_MailCTR Resource RidsNrrDeEicb Resource RidsNrrDorlLpl4 Resource RidsNrrLAJBurkhardt Resource RidsNrrPMDiabloCanyon Resource Sincerely, IRA! Jennie K. Rankin, Project Manager Plant Licensing Branch IV Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation RidsNsirDsp Resource RidsRgn4MailCenter Resource

WKemper, NRRlDEJEICB

RStattel, NRRlDE/EICB RAlvarado, NRRlDEJEICB SMakor, RIV/DRS/EB2 ELee, NSIR ADAMS Accession Nos. ltr/Audit Report (OUO-SRI)

Ml13232A249; Redacted ltr Ml13232A258 NRRlDORULPL4/LA

,NAME .OFFICE NRRlDORULPL4/PM NRRlDORULPL4/PM JBurkhardt

. DATE MBartlett JRankin 08/19/13 NSIRIDSP/CSIRB/BC I OFFICE l. NAME CErianger 4/24/13 915/13 NRRlDORULPL4/BC MMarkley 9/17113 8/22113 NRRlDORULPL4IPM JRankin 9/17/13 OFFICIAL RECORD COpy OFFICIAL USE ONLY SECURITY RELATED INFORMAnON