ML18346A030

From kanterella
Jump to navigation Jump to search
Information Request for the Cyber-Security Inspection and Notification to Perform Inspection 05000269/2019410, 05000270/2019410, and 05000287/2019410 (Public)
ML18346A030
Person / Time
Site: Oconee  Duke energy icon.png
Issue date: 12/07/2018
From: Scott Shaeffer
NRC/RGN-II/DRS/EB2
To: Burchfield E
Duke Energy Carolinas
References
IR 2019410
Download: ML18346A030 (4)


See also: IR 05000269/2019410

Text

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

UNITED STATES

NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200

ATLANTA, GEORGIA 30303-1257

December 7, 2018

Mr. Ed Burchfield, Jr.

Site Vice President

Oconee Nuclear Station

Duke Energy Carolinas, LLC

7800 Rochester Highway

Seneca, SC 29672-0752

SUBJECT: OCONEE NUCLEAR STATION - INFORMATION REQUEST FOR THE CYBER-

SECURITY INSPECTION AND NOTIFICATION TO PERFORM INSPECTION

05000269/2019410, 05000270/2019410, and 05000287/2019410.

Dear Mr. Burchfield:

On April 8, 2019, the U.S. Nuclear Regulatory Commission (NRC) will begin an inspection in

accordance with Inspection Procedure (IP) 71130.10P Cyber-Security, Revision 0 Oconee

Nuclear Station. The inspection will be performed to evaluate and verify your ability to meet the

Milestone 8 (i.e., full implementation) requirements of the NRCs Cyber-Security Rule, Title 10,

Code of Federal Regulations (CFR), Part 73, Section 54, Protection of Digital Computer and

Communication Systems and Networks. The onsite portion of the inspection will take place

during the weeks of April 8, 2019, and April 22, 2019. The information gathering trip coincide

with Catawbas information gathering trip the week of January 14th, 2019.

Experience has shown that these types of inspections are extremely resource intensive, both for

the NRC inspectors and the licensee staff. In order to minimize the inspection impact on the

site and to ensure a productive inspection for both parties, we have enclosed a request for

documents needed for the inspection. These documents have been divided into four groups.

The first group specifies information necessary to assist the inspection team in choosing the

focus areas (i.e., sample set) to be inspected by the cyber-security IP. This information should

be made available via secure site (i.e., Sharepoint, Certrec) no later than January 14, 2019.

The inspection team will review this information and, by February 11, 2019, will request the

specific items that should be provided for review.

The second group of additional requested documents will assist the inspection team in the

evaluation of the critical systems and critical digital assets (CSs/CDAs), defensive architecture,

and the areas of the licensees CSP selected for the cyber-security inspection. This information

will be requested for review via secure site (i.e., Sharepoint, Certrec) before March 11, 2019.

The third group of requested documents consists of those items that the inspection team will

review, or need access to, during the inspection. Please have this information available by the

first day of the onsite inspection, April 4, 2019.

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

E. Burchfield 2

The fourth group of information is necessary to aid the inspection team in tracking issues

identified as a result of the inspection. It is requested that this information be provided to the

lead inspector as the information is generated during the inspection. It is important that all of

these documents are up to date and complete in order to minimize the number of additional

documents requested during the preparation and/or the onsite portions of the inspection.

The lead inspector for this inspection is Melana Singletary. We understand that our regulatory

contact for this inspection is Sam Adams of your organization. If there are any questions about

the inspection or the material requested, please contact the lead inspector at

404-997-4752 or via e-mail at Melana.Singletary@nrc.gov.

This letter does not contain new or amended information collection requirements subject to the

Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection

requirements were approved by the Office of Management and Budget, control number 3150-

0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a

request for information or an information collection requirement unless the requesting document

displays a currently valid Office of Management and Budget control number.

In accordance with 10 CFR 2.390, Public Inspections, Exemptions, Requests for Withholding,

of the NRC's "Rules of Practice," a copy of this letter and its enclosure will not be available

electronically for public inspection in the NRCs Public Document Room or from the Publicly

Available Records (PARS) component of the NRC's Agencywide Documents Access and

Management System (ADAMS). ADAMS is accessible from the NRC Web site at

http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

Sincerely,

/RA/

Scott M. Shaeffer, Chief

Engineering Branch 2

Division of Reactor Safety

Docket No.: 50-269, 50-270, 50-287

License No.: DPR-38, DPR-47, DPR-55

Enclosure:

Security Inspection Document Request

cc: See Page 3

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

E. Burchfield 3

cc:

Mr. Chris Wasik

Regulatory Affairs Manager

Oconee Nuclear Station

Duke Energy Carolinas, LLC

7800 Rochester Highway

Seneca, SC 29672

Mr. Mark McNeely

Director, Nuclear Security Operations

Oconee Nuclear Station

Duke Energy Carolinas, LLC

7800 Rochester Highway

Seneca, SC 29672

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

___ML 18346A030 _ SUNSI REVIEW COMPLETE FORM 665 ATTACHED

OFFICE RII/DRS/EB1 RII:DRS/EB1

SIGNATURE MJS6 SMS

NAME MSINGLETARY SSHAEFFER

DATE 12/7/2018 12/7/2018

E-MAIL COPY? YES NO YES NO