ML14021A097: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(StriderTol Bot change)
 
(5 intermediate revisions by the same user not shown)
Line 2: Line 2:
| number = ML14021A097
| number = ML14021A097
| issue date = 01/16/2014
| issue date = 01/16/2014
| title = Turkey Point Nuclear Power Plant - Notification of Cyber Security Ti Milestones 1-7 Inspection and Request for Information (NRC Inspection Report No. 05000250-14-404 and 05000251-14-404)
| title = Notification of Cyber Security Ti Milestones 1-7 Inspection and Request for Information (NRC Inspection Report No. 05000250-14-404 and 05000251-14-404)
| author name = Shaeffer S M
| author name = Shaeffer S
| author affiliation = NRC/RGN-II/DRS/EB2
| author affiliation = NRC/RGN-II/DRS/EB2
| addressee name = Nazar M
| addressee name = Nazar M
Line 14: Line 14:
| page count = 6
| page count = 6
}}
}}
See also: [[followed by::IR 05000250/2014404]]
See also: [[see also::IR 05000250/2014404]]


=Text=
=Text=
{{#Wiki_filter: OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  UNITED STATES NUCLEAR REGULATORY COMMISSION REGION II 245 PEACHTREE CENTER AVENUE NE, SUITE 1200 ATLANTA, GEORGIA  30303-1257  Enclosure transmitted herewith contains SUNSI.  When separated from enclosure, this transmittal document is decontrolled   
{{#Wiki_filter:OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
LIMITED INTERNAL DISTRIBUTION PERMITTED  OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION  January 16, 2014  Mr. Mano Nazar  
   
UNITED STATES  
NUCLEAR REGULATORY COMMISSION  
REGION II  
245 PEACHTREE CENTER AVENUE NE, SUITE 1200  
ATLANTA, GEORGIA  30303-1257  
   
Enclosure transmitted herewith contains SUNSI.  When separated from enclosure, this  
transmittal document is decontrolled  
   
LIMITED INTERNAL  
DISTRIBUTION PERMITTED  
   
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION  
   
January 16, 2014  
   
Mr. Mano Nazar  
Executive Vice President  
Executive Vice President  
   and Chief Nuclear Officer  
   and Chief Nuclear Officer  
Florida Power and Light Company  
Florida Power and Light Company  
P.O. Box 14000 Juno Beach, FL  33408-0420   
P.O. Box 14000  
  SUBJECT:  TURKEY POINT NUCLEAR POWER PLANT - NOTIFICATION OF CYBER SECURITY TI MILESTONES 1-7  INSPECTION AND REQUEST FOR  
Juno Beach, FL  33408-0420  
INFORMATION (NRC INSPECTION REPORT NO. 05000250/2014404 AND 05000251/2014404)   
   
   
SUBJECT:   
TURKEY POINT NUCLEAR POWER PLANT - NOTIFICATION OF CYBER  
SECURITY TI MILESTONES 1-7  INSPECTION AND REQUEST FOR  
INFORMATION (NRC INSPECTION REPORT NO. 05000250/2014404 AND  
05000251/2014404)  
   
Dear Mr. Nazar:  
Dear Mr. Nazar:  
   
   
The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC) Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements specified by the conditions of your operating license at the Turkey Point Nuclear Plant Units 3 &  
The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)  
Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements  
specified by the conditions of your operating license at the Turkey Point Nuclear Plant Units 3 &  
4, on May 19 - 23, 2014.  The inspection team will be led by Mr. Rodney Fanner, Reactor  
4, on May 19 - 23, 2014.  The inspection team will be led by Mr. Rodney Fanner, Reactor  
Inspector, of the NRC RII office.  The team will be composed of personnel from the NRC RII office and personnel from the NRC office of Nuclear Security and Incident Response (NSIR).   
Inspector, of the NRC RII office.  The team will be composed of personnel from the NRC RII  
The inspection will be conducted in accordance with Temporary Instruction (TI) 2201/004, "Inspection of Implementation of Interim Cyber Security Milestones 1-7." The TI inspection will be performed to evaluate and verify your ability to meet the interim milestone requirements of the NRC's Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73, Section 54, "Protection of Digital Computer and Communication Systems and Networks." During a telephone conversation on January 13, 2014, Mr. Fanner confirmed with Mr. P. Czaya of your staff, arrangements for an information-gathering site visit and a one-week onsite  
office and personnel from the NRC office of Nuclear Security and Incident Response (NSIR).   
inspection.  The schedule is as follows:   * Information gathering visit:  April 29 - May 1, 2014  * Onsite inspection:  May 19 - 23, 2014  The purpose of the information gathering visit is to: (1) obtain information and documentation needed to support the TI inspection; (2) become familiar with the Turkey Point Nuclear Power  
The inspection will be conducted in accordance with Temporary Instruction (TI) 2201/004,  
Plant Cyber Security Program and plant layout; and (3) arrange administrative details, such as
Inspection of Implementation of Interim Cyber Security Milestones 1-7.  The TI inspection will  
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION M. Nazar 2 OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  office space, availability of knowledgeable office personnel and to ensure unescorted site access privileges.  
be performed to evaluate and verify your ability to meet the interim milestone requirements of  
  In order to assure a productive TI inspection, we have enclosed a request for documents needed to ensure the inspectors are adequately prepared.  These documents have been  
the NRCs Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73,  
Section 54, Protection of Digital Computer and Communication Systems and Networks.  
During a telephone conversation on January 13, 2014, Mr. Fanner confirmed with Mr. P. Czaya  
of your staff, arrangements for an information-gathering site visit and a one-week onsite  
inspection.  The schedule is as follows:
*  
Information gathering visit:  April 29 - May 1, 2014   
*  
Onsite inspection:  May 19 - 23, 2014  
   
The purpose of the information gathering visit is to: (1) obtain information and documentation  
needed to support the TI inspection; (2) become familiar with the Turkey Point Nuclear Power  
Plant Cyber Security Program and plant layout; and (3) arrange administrative details, such as  
 
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
M. Nazar  
2  
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
   
office space, availability of knowledgeable office personnel and to ensure unescorted site  
access privileges.  
   
In order to assure a productive TI inspection, we have enclosed a request for documents  
needed to ensure the inspectors are adequately prepared.  These documents have been  
divided into three groups (I, II, & III).  Group I lists information necessary to aid the inspectors in  
divided into three groups (I, II, & III).  Group I lists information necessary to aid the inspectors in  
planning for the TI inspection prior to the information gathering visit.  It is requested that this  
planning for the TI inspection prior to the information gathering visit.  It is requested that this  
information be provided to the lead inspector via mail no later than April 18, 2014.  Group II lists  
information be provided to the lead inspector via mail no later than April 18, 2014.  Group II lists  
information and possible areas for discussion necessary to assist the inspectors during the TI inspection.  It is requested this information be available during the information gathering visit April 29, 2014.  Group III consists of those items that the inspectors will review, or need access  
information and possible areas for discussion necessary to assist the inspectors during the  
TI inspection.  It is requested this information be available during the information gathering visit  
April 29, 2014.  Group III consists of those items that the inspectors will review, or need access  
to, during the TI inspection.  Group III also lists the information necessary to aid the inspectors  
to, during the TI inspection.  Group III also lists the information necessary to aid the inspectors  
in tracking questions and answers identified as a result of the TI inspection.  It is requested that  
in tracking questions and answers identified as a result of the TI inspection.  It is requested that  
this information be provided to the lead inspector as the information is generated during the TI inspection.  It is important that all of these documents are up to date and complete in order to minimize the number of additional documents requested during the preparation and/or the  
this information be provided to the lead inspector as the information is generated during the  
TI inspection.  It is important that all of these documents are up to date and complete in order to  
minimize the number of additional documents requested during the preparation and/or the  
onsite portions of the TI inspection.  
onsite portions of the TI inspection.  
   
   
This letter does not contain new or amended information collection requirements subject to the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.).  Existing information collection requirements were approved by the Office of Management and Budget, control number 3150-0011.  The NRC may not conduct or sponsor, and a person is not required to respond to, a  
This letter does not contain new or amended information collection requirements subject to the  
Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.).  Existing information collection  
requirements were approved by the Office of Management and Budget, control number 3150-
0011.  The NRC may not conduct or sponsor, and a person is not required to respond to, a  
request for information or an information collection requirement unless the requesting document  
request for information or an information collection requirement unless the requesting document  
displays a currently valid Office of Management and Budget control number.   
displays a currently valid Office of Management and Budget control number.   
  Your cooperation and support during this inspection will be appreciated.  If you have questions concerning this inspection, or the inspection team's information or logistical needs, please  
   
Your cooperation and support during this inspection will be appreciated.  If you have questions  
concerning this inspection, or the inspection team's information or logistical needs, please  
contact Mr. Fanner at (404) 997-4638, or me at (404) 997-4521.  
contact Mr. Fanner at (404) 997-4638, or me at (404) 997-4521.  
 
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION M. Nazar 3 OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's document system, ADAMS.  ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).  However, because of the security-related concerns  
 
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
M. Nazar  
3  
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
   
In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be  
available electronically for public inspection in the NRC Public Document Room or from the  
Publicly Available Records (PARS) component of NRC's document system, ADAMS.  
   
ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the  
Public Electronic Reading Room).  However, because of the security-related concerns  
contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters  
contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters  
enclosure will not be available for public inspection.   Sincerely,       /RA/   Scott M. Shaeffer, Chief Engineering Branch 2  
enclosure will not be available for public inspection.
Division of Reactor Safety  
Docket Nos.: 50-250, 50-251 License Nos.: DPR-31, DPR-41   
Sincerely,  
/RA/  
Scott M. Shaeffer, Chief  
Engineering Branch 2  
Division of Reactor Safety
Docket Nos.: 50-250, 50-251  
License Nos.: DPR-31, DPR-41  
   
Enclosure:  Document Request For Cyber Security   
Enclosure:  Document Request For Cyber Security   
        Temporary Instruction (TI) 2201/004 Interim         Milestones 1-7 Inspection         (OFFICIAL USE ONLY)  
cc:  (See page 4)   
      Temporary Instruction (TI) 2201/004 Interim
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION M. Nazar 3 OFFICIAL USE ONLY - SECURITY RELATED INFORMATION In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's document system, ADAMS. ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room). However, because of the security-related concerns
contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters
      Milestones 1-7 Inspection
enclosure will not be available for public inspection.  Sincerely,        /RA/  Scott M. Shaeffer, Chief Engineering Branch 2
Division of Reactor Safety 
      (OFFICIAL USE ONLY)  
Docket Nos.: 50-250, 50-251 License Nos.: DPR-31, DPR-41  
Enclosure: Document Request For Cyber Security  
        Temporary Instruction (TI) 2201/004 Interim          Milestones 1-7 Inspection          (OFFICIAL USE ONLY) cc: (See page 4)
cc:  (See page 4)  
 
 
_ML14021A097__________
x SUNSI REVIEW COMPLETE G FORM 665 ATTACHED
OFFICE
RII:DRS
RII:DRS
   
   
   
   
SIGNATURE
    RJF2
SMS
       
   
   
NAME
RFANNER
SSHAEFFER
   
   
   
   
   
   
   
    
DATE
1/16/2014
1/ 16/2014
1/   /2014
1/    /2014
1/    /2014
1/    /2014
1/      /2014
E-MAIL COPY?
    YES
NO   
  YES
NO      YES
NO   
  YES
NO   
  YES
NO      YES
NO   
  YES
NO   
 
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
M. Nazar
4
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
   
   
X PUBLICLY AVAILABLE                                                SENSITIVE  X NON-SENSITIVE ADAMS: X Yes ACCESSION NUMBER:_ML14021A097__________  x SUNSI REVIEW COMPLETE G FORM 665 ATTACHED OFFICE RII:DRS RII:DRS      SIGNATURE    RJF2 SMS            NAME RFANNER SSHAEFFER      DATE 1/16/2014 1/ 16/2014 1/    /2014 1/    /2014 1/    /2014 1/    /2014 1/      /2014 E-MAIL COPY?    YES NO      YES NO      YES NO      YES NO      YES NO      YES NO      YES NO    OFFICIAL RECORD COPY          DOCUMENT NAME:  S:\DRS\Eng Branch 2\Cyber Inspection Reports\CYBER - TURKEY POINT\TURKEY POINT CYBER SECURITY NOTIFICATION LETTER W-OUO.DOCX   
cc:  
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION M. Nazar 4 OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  cc: Michael Kiley  
Michael Kiley  
Site Vice President Turkey Point Nuclear Power Plant P.O. Box 14000  
Site Vice President  
Turkey Point Nuclear Power Plant  
P.O. Box 14000  
Juno Beach, FL  33408-0420  
Juno Beach, FL  33408-0420  
   
   
Robert Tomonto  
Robert Tomonto  
Licensing Manager Turkey Point Nuclear Power Plant P.O. Box 14000  
Licensing Manager  
Juno Beach, FL 33408-0420  
Turkey Point Nuclear Power Plant  
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION   OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  Letter to Mano Nazar from Scott Shaeffer dated Janaury 16, 2014   
P.O. Box 14000  
SUBJECT:  TURKEY POINT NUCLEAR PLANT - NOTIFICATION OF CYBER SECURITY TI MILESTONES 1-7  INSPECTION AND REQUEST FOR INFORMATION (NRC  
Juno Beach, FL 33408-0420
INSPECTION REPORT NO. 05000250/2014404 AND 05000251/2014404)  
 
Distribution: RidsNrrPMTurkey Point
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
C. Evans, RII EICS L. Douglas, RII EICS G. West, NSIR (hard copy w/ encl)
RIDSNRRDIRS
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
   
Letter to Mano Nazar from Scott Shaeffer dated Janaury 16, 2014  
   
SUBJECT:   
TURKEY POINT NUCLEAR PLANT - NOTIFICATION OF CYBER SECURITY TI  
MILESTONES 1-7  INSPECTION AND REQUEST FOR INFORMATION (NRC  
INSPECTION REPORT NO. 05000250/2014404 AND 05000251/2014404)  
   
   
   
     
Distribution:
 
RidsNrrPMTurkey Point
   
C. Evans, RII EICS 
 
L. Douglas, RII EICS
 
G. West, NSIR (hard copy w/ encl)
 
RIDSNRRDIRS
 
 
     
 
}}
}}

Latest revision as of 23:51, 10 January 2025

Notification of Cyber Security Ti Milestones 1-7 Inspection and Request for Information (NRC Inspection Report No. 05000250-14-404 and 05000251-14-404)
ML14021A097
Person / Time
Site: Turkey Point  NextEra Energy icon.png
Issue date: 01/16/2014
From: Scott Shaeffer
NRC/RGN-II/DRS/EB2
To: Nazar M
Florida Power & Light Co
References
IR-14-404
Download: ML14021A097 (6)


See also: IR 05000250/2014404

Text

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

UNITED STATES

NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200

ATLANTA, GEORGIA 30303-1257

Enclosure transmitted herewith contains SUNSI. When separated from enclosure, this

transmittal document is decontrolled

LIMITED INTERNAL

DISTRIBUTION PERMITTED

OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION

January 16, 2014

Mr. Mano Nazar

Executive Vice President

and Chief Nuclear Officer

Florida Power and Light Company

P.O. Box 14000

Juno Beach, FL 33408-0420

SUBJECT:

TURKEY POINT NUCLEAR POWER PLANT - NOTIFICATION OF CYBER

SECURITY TI MILESTONES 1-7 INSPECTION AND REQUEST FOR

INFORMATION (NRC INSPECTION REPORT NO. 05000250/2014404 AND

05000251/2014404)

Dear Mr. Nazar:

The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)

Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements

specified by the conditions of your operating license at the Turkey Point Nuclear Plant Units 3 &

4, on May 19 - 23, 2014. The inspection team will be led by Mr. Rodney Fanner, Reactor

Inspector, of the NRC RII office. The team will be composed of personnel from the NRC RII

office and personnel from the NRC office of Nuclear Security and Incident Response (NSIR).

The inspection will be conducted in accordance with Temporary Instruction (TI) 2201/004,

Inspection of Implementation of Interim Cyber Security Milestones 1-7. The TI inspection will

be performed to evaluate and verify your ability to meet the interim milestone requirements of

the NRCs Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73,

Section 54, Protection of Digital Computer and Communication Systems and Networks.

During a telephone conversation on January 13, 2014, Mr. Fanner confirmed with Mr. P. Czaya

of your staff, arrangements for an information-gathering site visit and a one-week onsite

inspection. The schedule is as follows:

Information gathering visit: April 29 - May 1, 2014

Onsite inspection: May 19 - 23, 2014

The purpose of the information gathering visit is to: (1) obtain information and documentation

needed to support the TI inspection; (2) become familiar with the Turkey Point Nuclear Power

Plant Cyber Security Program and plant layout; and (3) arrange administrative details, such as

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

M. Nazar

2

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

office space, availability of knowledgeable office personnel and to ensure unescorted site

access privileges.

In order to assure a productive TI inspection, we have enclosed a request for documents

needed to ensure the inspectors are adequately prepared. These documents have been

divided into three groups (I, II, & III). Group I lists information necessary to aid the inspectors in

planning for the TI inspection prior to the information gathering visit. It is requested that this

information be provided to the lead inspector via mail no later than April 18, 2014. Group II lists

information and possible areas for discussion necessary to assist the inspectors during the

TI inspection. It is requested this information be available during the information gathering visit

April 29, 2014. Group III consists of those items that the inspectors will review, or need access

to, during the TI inspection. Group III also lists the information necessary to aid the inspectors

in tracking questions and answers identified as a result of the TI inspection. It is requested that

this information be provided to the lead inspector as the information is generated during the

TI inspection. It is important that all of these documents are up to date and complete in order to

minimize the number of additional documents requested during the preparation and/or the

onsite portions of the TI inspection.

This letter does not contain new or amended information collection requirements subject to the

Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection

requirements were approved by the Office of Management and Budget, control number 3150-

0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a

request for information or an information collection requirement unless the requesting document

displays a currently valid Office of Management and Budget control number.

Your cooperation and support during this inspection will be appreciated. If you have questions

concerning this inspection, or the inspection team's information or logistical needs, please

contact Mr. Fanner at (404) 997-4638, or me at (404) 997-4521.

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

M. Nazar

3

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be

available electronically for public inspection in the NRC Public Document Room or from the

Publicly Available Records (PARS) component of NRC's document system, ADAMS.

ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the

Public Electronic Reading Room). However, because of the security-related concerns

contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters

enclosure will not be available for public inspection.

Sincerely,

/RA/

Scott M. Shaeffer, Chief

Engineering Branch 2

Division of Reactor Safety

Docket Nos.: 50-250, 50-251

License Nos.: DPR-31, DPR-41

Enclosure: Document Request For Cyber Security

Temporary Instruction (TI) 2201/004 Interim

Milestones 1-7 Inspection

(OFFICIAL USE ONLY)

cc: (See page 4)

_ML14021A097__________

x SUNSI REVIEW COMPLETE G FORM 665 ATTACHED

OFFICE

RII:DRS

RII:DRS

SIGNATURE

RJF2

SMS

NAME

RFANNER

SSHAEFFER

DATE

1/16/2014

1/ 16/2014

1/ /2014

1/ /2014

1/ /2014

1/ /2014

1/ /2014

E-MAIL COPY?

YES

NO

YES

NO YES

NO

YES

NO

YES

NO YES

NO

YES

NO

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

M. Nazar

4

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

cc:

Michael Kiley

Site Vice President

Turkey Point Nuclear Power Plant

P.O. Box 14000

Juno Beach, FL 33408-0420

Robert Tomonto

Licensing Manager

Turkey Point Nuclear Power Plant

P.O. Box 14000

Juno Beach, FL 33408-0420

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

Letter to Mano Nazar from Scott Shaeffer dated Janaury 16, 2014

SUBJECT:

TURKEY POINT NUCLEAR PLANT - NOTIFICATION OF CYBER SECURITY TI

MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC

INSPECTION REPORT NO. 05000250/2014404 AND 05000251/2014404)

Distribution:

RidsNrrPMTurkey Point

C. Evans, RII EICS

L. Douglas, RII EICS

G. West, NSIR (hard copy w/ encl)

RIDSNRRDIRS