IR 05000390/2014405

NRC Inspection of U1 Cyber Security Milestones, Inspection Rpt No. 05000390/2014405, Inspection of U2 Implementation of the Cyber Security Pro. Requirements Inspection Rpt No. 05000391/2014406 & Enforcement Discretion OUO Removed

ML14252A491
Person / Time
Site:	Watts Bar
Issue date:	09/08/2014
From:	Scott Shaeffer NRC/RGN-II/DRS/EB2
To:	James Shea Tennessee Valley Authority
References
IR-2014-405, IR-2014-406
Download: ML14252A491 (5)

Text

September 8, 2014

SUBJECT:

WATTS BAR NUCLEAR PLANT NRC INSPECTION OF UNIT 1 CYBER SECURITY MILESTONES, INSPECTION REPORT NO. 05000390/2014405, INSPECTION OF UNIT 2 IMPLEMENTATION OF THE CYBER SECURITY PROGRAM REQUIREMENTS, INSPECTION REPORT NO. 05000391/2014406, AND ENFORCEMENT DISCRETION

Dear Mr. Shea:

On July 25, 2014, the U.S. Nuclear Regulatory Commission (NRC) completed the onsite activities associated with the inspection at your Watts Bar Nuclear Plant, Units 1 and 2. On July 25, 2014, the NRC inspectors discussed the results of this inspection with Mr. K. Walsh and other members of your staff. Inspectors documented the results of this inspection in the enclosed report.

The inspection examined activities conducted under your license as they relate to safety and compliance with the commissions rules and regulations and with the conditions of your license related to the implementation of interim cyber security milestones. The inspection of Unit 1 was conducted in accordance with NRC Temporary Instruction (TI) 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7 issued January 3, 2013. The Unit 2 activities were conducted in accordance with NRC Temporary Instruction 2201/005, Inspection of the Tennessee Valley Authority Watts Bar Nuclear Plant Unit 2 Implementation of the Cyber Security Program Required by 10 CFR 73.54 and 10 CFR 73.55.

The report documents 3 NRC identified violations, of very low safety significance (Green), for which the NRC is exercising enforcement discretion. The report also discusses 1 Green, non-cited violation (NCV) which was not eligible for enforcement discretion.

If you disagree with a cross-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the Regional Administrator, RII, and the NRC Resident Inspector at the Watts Bar Nuclear Plant.

The issues above were discussed at the security issues forum (SIF) meeting on August 27, 2014 and a follow-up telephone meeting on September 8, 2014. Based upon the meeting, the NRC is not taking enforcement action for the violations relevant to 10 CFR 73.54 because they meet the criteria established in an NRC Memorandum from Barry C. Westreich, Director, Cyber Security Directorate, Office of Nuclear Security and Incident Response, to each regional office and Director, Division of Reactor Safety, Subject: Enhanced Guidance for Licensee Near-Term Corrective Actions to Address Cyber Security Inspection Findings and Licensee Eligibility for Good-Faith Attempt Discretion dated July 1, 2013 (ADAMS Accession Number ML13178A203). Upon completion of all corrective actions, you are requested to provide written notification to the NRCs regional office as to the method and date of closure for the identified issue(s).

If you contest the violations or significance of the findings discussed in the report, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, Region II; the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC Resident Inspector at Watts Bar Nuclear Plant, Units 1 & 2. If you disagree with a cross-cutting assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the Regional Administrator, Region II; and the NRC resident inspector at the Watts Bar Nuclear Plant, Unit 1.

In accordance with 10 CFR 2.390 of the NRCs Rules of Practice, a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of the NRCs Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and security-related information is necessary to provide an acceptable response, please mark your entire response Security-Related InformationWithhold from Public Disclosure under 10 CFR 2.390, in accordance with 10 CFR 2.390(d)(1), and follow the instructions for withholding in 10 CFR 2.390(b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,

/RA/

Scott M. Shaeffer, Chief Engineering Branch 2 Division of Reactor Safety

Docket No. 50-390, 50-391 License No.: NPF-90 Construction Permit No: CPPR-92

Enclosure:

Inspection Report No. 05000390/2014405 AND 05000391/2014406 w/ Attachment: Supplementary Information (Official Use Only - Security Related Information)

cc: (See page 3)

_ML14252A491 ____________

SUNSI REVIEW COMPLETE FORM 665 ATTACHED OFFICE RII:DRS RII:DRS CONTRACTOR RII:DRS RII:DRP CONTRACTOR

SIGNATURE

JJP3 MRR1 DAJ2 Hamman for MXS1 MJB1 NAME R.FANNER J.PATEL M.RORABAUGH D.JONES J.BARTLEY MSHINN MBUCKLEY DATE 8/ /2014 8/272014 9/ 3 /2014 8/27/2014 9/5 /2014 9/ 2 /2014 8/20 /2014 E-MAIL COPY?

YES NO YES NO YES NO YES NO YES NO YES NO YES NO cc:

Ken Walsh Site Vice President Tennessee Valley Authority Watts Bar Nuclear Plant Mail Stop: ADM 1V-WBN P. O. Box 2000 Spring City, TN 37381-2000

Michael D. Skaggs Tennessee Valley Authority 1101 Market Street Chattanooga, TN 37402-2801 Letter to Joseph from Scott M Shaeffer dated September 8, 2014.

SUBJECT:

WATTS BAR NUCLEAR PLANT - NRC INSPECTION OF UNIT 1 CYBER SECURITY MILESTONES, INSPECTION REPORT NO. 05000390/2014405, INSPECTION OF UNIT 2 IMPLEMENTATION OF THE CYBER SECURITY PROGRAM REQUIREMENTS, INSPECTION REPORT NO. 05000391/2014406, AND ENFORCEMENT DISCRETION

Distribution:

B. Westreich, NSIR (hard copy w/encl)

G. West Jr., NSIR (hard copy w/encl)

N. Coleman, OE (hard copy w/encl)

J. Rogge, RI DRS B. Daley, RIII, DRS J. Dixon, RIV, DRS R. Haag, RII, DCP RIDSNRRDIRS

Distribution w/o Encl:

PUBLIC