IR 05000498/2017407

Project Electric Generating Station NRC Cyber Security Full Implementation Inspection Report 05000498/2017407 and 05000499/2017407

ML17313B151
Person / Time
Site:	South Texas
Issue date:	11/07/2017
From:	Werner G E NRC/RGN-IV/DRS/EB-2
To:	Powell G T South Texas
Greg Werner
References
IR 2017407
Download: ML17313B151 (3)

Text

November 7, 2017

Mr. G. Executive Vice President and Chief Nuclear Officer STP Nuclear Operating Company P.O. Box 289 Wadsworth, TX 77483

SUBJECT: SOUTH TEXAS PROJECT ELECTRIC GENERATING STATION NRC CYBER SECU RITY FULL IMPLEMENTATION INSPECTION

REPORT 05000498/2017407 AND 05000499/2017407

Dear Mr. Powell:

On October 2 3, 2017 , the U.S. Nuclear Regulatory Commission (NRC) completed a Cyber Security inspection at your South Texas Project Electric Generating Station, Units 1 and 2. The inspection evaluated full implementation of your cyber security program, as outlined in your approved cyber security plan and described in Inspection Procedure 71130,10P, "Cyber Security," Revision 0. The enclosed inspection report documents the inspection results, which were discussed on October 2 3, 2017 , with Mr. Aldo Capristo, Execu t i ve Vice President and Chief Administrative Officer, and other members of your staff.

The inspection examined activities conducted under your license as they relate to safety and compliance with the Commission's rules and regulations

, and with the conditions of your license. The inspectors reviewed selected procedures and records, observed activities, and interviewed personnel.

NRC inspectors documented three findings of very low significance (Green) in this report. These findings involved violations of NRC requirements. The NRC is treating these violations as non-cited violations (NCVs) consistent with Section 2.3.2.a of the Enforcement Policy. These issues were discussed and reviewed during a Security Issues Forum Panel meeting conducted on September 20, 2017.

If you contest the violations or significance of these NCVs, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region IV; the Director, Office of Enforcement; and the NRC resident inspector at the South Texas Project Electric Generating Station. If you disagree with a cross

-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the U.S. Nuclear Regulatory Commission, ATTN:

Document Control Desk, Washington, DC 20555 0001; with copies to the Regional Administrator, Region IV; and the NRC resident inspector at the South Texas Project Electric Generating Station.

This letter will be made available for public inspection and copying at http://www.nrc.gov/reading

-rm/adams.html and at the NRC Public Document Room in accordance with 10 CFR 2.390, "Public Inspections, Exemptions, Requests for Withholding.

" The material enclosed herewith, however, contains Security

-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security

-Related Information is necessary to provide an acceptable response, please mark your entire response

, "Security-Related Information

-Withhold from public disclosure under 10 CFR 2.390

," in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390(b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,/RA James Drake Acting for/ Gregory E. Werner, Chief Engineering Branch 2 Division of Reactor Safety Dockets: 50

-498; 50-499 Licenses: NPF

-76; NPF-80 Nonpublic

Enclosure:

Inspection Report No. 05000498/2017407; 05000499/2017407

w/Attachment:

Supplemental Information

cc w/o enclosure:

Electronic Distribution

Entire Report:

ADAMS: Non-Publicly Available Non-Sensitive Keyword: SUNSI Review By:

GAP Yes No Publicly Available Sensitive _______MD 3.4 A.3 ADAMS ACCESSION NUMBER:

ML Cover Letter Only:

ADAMS: Non-Publicly Available Non-Sensitive Keyword: SUNSI Review By:

GAP Yes No Publicly Available Sensitive NRC-002 OFFICE SRI:EB2 RI:EB2 C:EB2 C:PB B C:EB2 NAME GPick SMakor GWerner NTaylor GWerner SIGNATURE /RA/ /RA/ /RA/ /RA/ /RA JFD for/ DATE 10/20/2017 10/24/2017 10/27/2017 11/05/2017 11/07/2017