IR 05000382/2018410

NRC Cyber Security Inspection Report 05000382/2018410

ML19029B332
Person / Time
Site:	Waterford
Issue date:	01/29/2019
From:	Ramirez F NRC/RGN-IV/DRS/EB-2
To:	Dinelli J Entergy Operations
Ramirez F
References
IR 2018410
Download: ML19029B332 (3)

Text

ary 29, 2019

SUBJECT:

WATERFORD STEAM ELECTRIC STATION, UNIT 3 - NRC CYBER SECURITY INSPECTION REPORT 05000382/2018410

Dear Mr. Dinelli:

On November 30, 2018, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite portion of a cyber security inspection at Waterford Steam Electric Station, Unit 3. On January 7, 2019, the NRC inspectors discussed the results of this inspection with Mr. J. Giddens, Senior Regulatory Assurance Manager, Corporate Regulatory Assurance, and other members of your staff. The results of this inspection are documented in the enclosed report.

NRC inspectors documented one finding of very low security significance (Green) in this report.

This finding involved a violation of NRC requirements. Additionally, inspectors documented a licensee-identified violation that was determined to be of very low security significance in this report. The NRC is treating these violations as non-cited violations (NCVs) consistent with Section 2.3.2 of the Enforcement Policy.

One cross-cutting aspect was assigned to the finding in the area of human performance associated with change management because personnel did not use a systematic process for evaluating and implementing change. In this instance, personnel did not appropriately verify that they had transferred the required testing into your plant procedures to ensure that the functionality of the device remained protected [H.3].

If you contest the violations or significance of these NCVs, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region IV; the Director, Office of Enforcement; and the NRC resident inspector at Waterford Steam Electric Station, Unit 3. If you disagree with the cross-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the U. S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC, 20555-0001; with copies to the Regional Administrator, Region IV; and the NRC resident inspector at Waterford Steam Electric Station, Unit 3.

This letter will be made available for public inspection and copying at http://www.nrc.gov/reading-rm/adams.html and the NRC Public Document Room in accordance with 10 CFR 2.390, Public Inspections, Exemptions, Requests for Withholding. However, the enclosed report contains Security-Related Information, so the enclosed report will not be made publically available in accordance with 10 CFR 2.390(d)(1). If you choose to provide a response that contains Security-Related Information, please mark your entire response Security-Related Information-Withhold from public disclosure under 10 CFR 2.390, in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1).

The NRC is waiving the affidavit requirements for your response in accordance with 10 CFR 2.390(b)(1)(ii).

Sincerely,

/RA/

Frances C. Ramirez, Acting Chief Engineering Branch 2 Division of Reactor Safety Docket No. 50-382 License No. NPF-38 Non-Public Enclosure:

NRC Inspection Report 05000382/2018410 WATERFORD STEAM ELECTRIC STATION, UNIT 3 - NRC CYBER SECURITY INSPECTION REPORT 05000382/2018410 - JANUARY 29, 2019 DISTRIBUTION w/enclosure:

Director, Division of Physical and Cyber Security Policy (Shana.Helton@nrc.gov)

Deputy Director, Division of Physical and Cyber Security Policy (David.Curtis@nrc.gov)

Chief, Reactor Security Branch (Alison.Rivera@nrc.gov)

Chief, Cyber Security Branch (James.Beardsley@nrc.gov)

Chief, RI DRS/EB2 (Glenn.Dentel@nrc.gov)

Chief, RII DRS/EB2 (Scott.Shaeffer@nrc.gov)

Chief, RIII DRS/EB3 (Robert.Daley@nrc.gov)

Chief, Security Oversight Support Branch (Doug.Huyck@nrc.gov) (

NSIR (Physical Security and Cyber Security) (Niry.Simonian@nrc.gov)

NSIR (Physical Security and Cyber Security (Eric.Wharton@nrc.gov)

Regional Administrator (Scott.Morris@nrc.gov)

Deputy Regional Administrator (Mark.Shaffer@nrc.gov)

DRP Director (Anton.Vegel@nrc.gov)

DRP Deputy Director (Michael.Hay@nrc.gov)

DRS Acting Director (Ryan.Lantz@nrc.gov)

DRS Acting Deputy Director (Geoffrey.Miller@nrc.gov)

DRS PSB1 Chief (Jeremy.Groom@nrc.gov)

Branch Chief, DRP (Neil.OKeefe@nrc.gov)

Acting Branch Chief, DRS (Frances.Ramirez@nrc.gov)

Acting Senior Resident Inspector (Chris.Speer@nrc.gov)

DISTRIBUTION w/o enclosure:

DCylkowski, RC APulvirenti, NRR JDixon, DRP AMoreno, RIV/OCA JVera, DRP BMaier, RSLO LReyna, DRP RKellar, DRS ARivera-Varona, RIV/OEDO PJayroe, DRS VDricks, ORA MHerrera, DRMA GWalker, OI R4Enforcement JWeil, RIV/OCA RidsOeMailCenter Resource ADAMS ACCESSION NUMBER: ML19029B324 Entire Report: ADAMS: Non-Publicly Available Non-Sensitive Keyword:

SUNSI Review By: GAP Yes No Publicly Available Sensitive _______MD 3.4 A.3 ADAMS ACCESSION NUMBER: ML19029B332 Cover Letter Only: ADAMS: Non-Publicly Available Non-Sensitive Keyword:

SUNSI Review By: GAP Yes No Publicly Available Sensitive NRC-002 OFFICE SRI:EB2 RI:EB2 AC:EB2 AC:EB2 C:PBD AC:EB2 NAME GPick SMakor JDrake FRamirez NOKeefe FRamirez SIGNATURE /RA/ /RA/ /RA/ /RA/ /RA JLD for/ /RA/

DATE 1/14/2019 1/17/2019 1/17/2019 1/25/2019 1/18/2019 1/29/2019