ML13058A319: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(StriderTol Bot change)
 
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
{{#Wiki_filter:OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
                                                  UNITED STATES
                                      NUCLEAR REGULATORY COMMISSION
UNITED STATES  
                                                      REGION II
NUCLEAR REGULATORY COMMISSION  
                                    245 PEACHTREE CENTER AVENUE NE, SUITE 1200
REGION II  
                                            ATLANTA, GEORGIA 30303-1257
245 PEACHTREE CENTER AVENUE NE, SUITE 1200  
                                                February 27, 2013
ATLANTA, GEORGIA 30303-1257  
      Mr. T. Preston Gillespie, Jr.
      Site Vice President
Enclosure transmitted herewith contains SUNSI.  When separated from enclosure, this
      Duke Energy Corporation
transmittal document is decontrolled
      Oconee Nuclear Station
      7800 Rochester Highway
LIMITED INTERNAL
      Seneca, SC 29672-0752
DISTRIBUTION PERMITTED
      SUBJECT:       OCONEE NUCLEAR STATION - NOTIFICATION OF CYBER SECURITY TI
                      MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC
OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
                      INSPECTION REPORT NO. 05000269/2013406 AND 05000270/2013406 AND
                      05000287/2013406)
February 27, 2013  
      The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)
      Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements
Mr. T. Preston Gillespie, Jr.  
      specified by the conditions of your operating license at the Oconee Nuclear Station on May 20 -
Site Vice President  
      24, 2013. The inspection team will be led by Mr. Jigar Patel, Reactor Inspector, of the NRC RII
Duke Energy Corporation  
      office. The team will be composed of personnel from the NRC RII office and personnel from the
Oconee Nuclear Station  
      NRC office of Nuclear Security and Incident Response (NSIR). The inspection will be
7800 Rochester Highway  
      conducted in accordance with Temporary Instruction (TI) 2201/004, Inspection of
Seneca, SC 29672-0752  
      Implementation of Interim Cyber Security Milestones 1-7. The TI inspection will be performed
      to evaluate and verify your ability to meet the interim milestone requirements of the NRCs
      Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73, Section 54,
SUBJECT:
      Protection of Digital Computer and Communication Systems and Networks.
OCONEE NUCLEAR STATION - NOTIFICATION OF CYBER SECURITY TI  
      In accordance with 10 CFR 73.54, each nuclear power plant licensee was required to submit
MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC  
      a proposed cyber security plan (CSP) and implementation schedule for NRC review and
INSPECTION REPORT NO. 05000269/2013406 AND 05000270/2013406 AND  
      approval. On December 14, 2009, by letter (ML093080517) to the Nuclear Energy Institute
05000287/2013406)  
      (NEI), the NRC provided their expectations for the proposed implementation schedule. On
      January 5, 2011, by letter (ML110060093) to the NRC, NEI issued an initial Template for the
      Cyber Security Plan Implementation Schedule (ML110060097). On February 28, 2011, by
The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)  
      letter (ML110600206) to the NRC, NEI provided a revised, Template for the Cyber Security
Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements  
      Plan Implementation Schedule. The purpose of the letters attachment was to provide the
specified by the conditions of your operating license at the Oconee Nuclear Station on May 20 -  
      licensee with a generically written template to develop their proposed CSP implementation
24, 2013. The inspection team will be led by Mr. Jigar Patel, Reactor Inspector, of the NRC RII  
      schedule. Utilization of the generic template required the licensee to make conforming changes
office. The team will be composed of personnel from the NRC RII office and personnel from the  
      to ensure the submitted schedule accurately accounted for site-specific activities. The CSP,
NRC office of Nuclear Security and Incident Response (NSIR). The inspection will be  
      implementation schedule, and other applicable information for your facility provided the
conducted in accordance with Temporary Instruction (TI) 2201/004, Inspection of  
Enclosure transmitted herewith contains SUNSI. When separated from enclosure, this
Implementation of Interim Cyber Security Milestones 1-7. The TI inspection will be performed  
transmittal document is decontrolled
to evaluate and verify your ability to meet the interim milestone requirements of the NRCs  
LIMITED INTERNAL
Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73, Section 54,  
DISTRIBUTION PERMITTED
Protection of Digital Computer and Communication Systems and Networks.  
                  OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION
In accordance with 10 CFR 73.54, each nuclear power plant licensee was required to submit  
a proposed cyber security plan (CSP) and implementation schedule for NRC review and  
approval. On December 14, 2009, by letter (ML093080517) to the Nuclear Energy Institute  
(NEI), the NRC provided their expectations for the proposed implementation schedule. On  
January 5, 2011, by letter (ML110060093) to the NRC, NEI issued an initial Template for the  
Cyber Security Plan Implementation Schedule (ML110060097). On February 28, 2011, by  
letter (ML110600206) to the NRC, NEI provided a revised, Template for the Cyber Security  
Plan Implementation Schedule. The purpose of the letters attachment was to provide the  
licensee with a generically written template to develop their proposed CSP implementation  
schedule. Utilization of the generic template required the licensee to make conforming changes  
to ensure the submitted schedule accurately accounted for site-specific activities. The CSP,  
implementation schedule, and other applicable information for your facility provided the  


                  OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
T. Preston Gillespie, Jr.                       2
T. Preston Gillespie, Jr.  
implementation aspects, including the key intermediate milestone attributes and dates as well
2  
as the full implementation dates. The implementation aspects were described based, in part, on
letters to the NRC dated November 20, 2009 (ML093410249), August 16, 2010
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
(ML1023001680, ML1023001681) and supplemented by letters dated September 27, 2010,
March 7, 2011, April 15, 2011 (ML111090627), and August 9, 2011 (ML11109A0741). By
implementation aspects, including the key intermediate milestone attributes and dates as well  
reference to letter dated August 31, 2011 (ML11216A064), license condition 3.E was modified
as the full implementation dates. The implementation aspects were described based, in part, on  
for facility operating licenses DPR-38, DPR-47, and DPR-55 for Oconee Units 1, 2, and 3 to
letters to the NRC dated November 20, 2009 (ML093410249), August 16, 2010  
ensure that the CSP would be implemented and maintained consistent with NRC requirements.
(ML1023001680, ML1023001681) and supplemented by letters dated September 27, 2010,  
On February 21, 2013, during a conversation between Ms. Judy Smith of your staff, and
March 7, 2011, April 15, 2011 (ML111090627), and August 9, 2011 (ML11109A0741). By  
Mr. Jigar Patel, NRC RII, our respective staffs confirmed arrangements for a three day
reference to letter dated August 31, 2011 (ML11216A064), license condition 3.E was modified  
information gathering onsite visit and a one-week onsite inspection. The subject TI inspection
for facility operating licenses DPR-38, DPR-47, and DPR-55 for Oconee Units 1, 2, and 3 to  
provides a programmatic level review and verification of the licensees site-specific
ensure that the CSP would be implemented and maintained consistent with NRC requirements.  
implementation of Interim Milestones 1 through 7. The schedule for the onsite TI Inspection for
the Interim Milestones 1 through 7 is as follows:
    *   Information gathering visit: May 7 - 9, 2013
On February 21, 2013, during a conversation between Ms. Judy Smith of your staff, and
    *   Onsite inspection: May 20 - 24, 2013
Mr. Jigar Patel, NRC RII, our respective staffs confirmed arrangements for a three day  
The purpose of the information gathering visit is to: (1) obtain information and documentation
information gathering onsite visit and a one-week onsite inspection. The subject TI inspection  
needed to support the TI inspection; (2) become familiar with the Oconee Nuclear Station Cyber
provides a programmatic level review and verification of the licensees site-specific  
Security Program and plant layout; and (3) arrange administrative details, such as office space,
implementation of Interim Milestones 1 through 7. The schedule for the onsite TI Inspection for  
availability of knowledgeable office personnel and to ensure unescorted site access privileges.
the Interim Milestones 1 through 7 is as follows:
In order to assure a productive TI inspection, we have enclosed a request for documents
needed to ensure the inspectors are adequately prepared. These documents have been
*  
divided into three groups (I, II, & III). Group I lists information necessary to aid the inspectors in
Information gathering visit: May 7 - 9, 2013
planning for the TI inspection prior to the information gathering visit. It is requested that this
*  
information be provided to the lead inspector via mail no later than April 10, 2013. Group II lists
Onsite inspection: May 20 - 24, 2013  
information and possible areas for discussion necessary to assist the inspectors during the
TI inspection. It is requested this information be available during the information gathering visit
The purpose of the information gathering visit is to: (1) obtain information and documentation  
(May 7, 2013). Group III consists of those items that the inspectors will review, or need access
needed to support the TI inspection; (2) become familiar with the Oconee Nuclear Station Cyber  
to, during the TI inspection. Group III also lists the information necessary to aid the inspectors
Security Program and plant layout; and (3) arrange administrative details, such as office space,  
in tracking questions and answers identified as a result of the TI inspection. It is requested that
availability of knowledgeable office personnel and to ensure unescorted site access privileges.  
this information be provided to the lead inspector as the information is generated during the
TI inspection. It is important that all of these documents are up to date and complete in order to
In order to assure a productive TI inspection, we have enclosed a request for documents  
minimize the number of additional documents requested during the preparation and/or the
needed to ensure the inspectors are adequately prepared. These documents have been  
onsite portions of the TI inspection.
divided into three groups (I, II, & III). Group I lists information necessary to aid the inspectors in  
This letter does not contain new or amended information collection requirements subject to the
planning for the TI inspection prior to the information gathering visit. It is requested that this  
Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection
information be provided to the lead inspector via mail no later than April 10, 2013. Group II lists  
information and possible areas for discussion necessary to assist the inspectors during the  
TI inspection. It is requested this information be available during the information gathering visit  
(May 7, 2013). Group III consists of those items that the inspectors will review, or need access  
to, during the TI inspection. Group III also lists the information necessary to aid the inspectors  
in tracking questions and answers identified as a result of the TI inspection. It is requested that  
this information be provided to the lead inspector as the information is generated during the  
TI inspection. It is important that all of these documents are up to date and complete in order to  
minimize the number of additional documents requested during the preparation and/or the  
onsite portions of the TI inspection.  
This letter does not contain new or amended information collection requirements subject to the  
Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection  
requirements were approved by the Office of Management and Budget, control number 3150-
requirements were approved by the Office of Management and Budget, control number 3150-
0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a
0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a  
request for information or an information collection requirement unless the requesting document
request for information or an information collection requirement unless the requesting document  
displays a currently valid Office of Management and Budget control number.
displays a currently valid Office of Management and Budget control number.  
Your cooperation and support during this inspection will be appreciated. If you have questions
concerning this inspection, or the inspection team's information or logistical needs, please
Your cooperation and support during this inspection will be appreciated. If you have questions  
contact Mr. Patel at (404) 997-4577, or me at (404) 997-4511.
concerning this inspection, or the inspection team's information or logistical needs, please  
                  OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
contact Mr. Patel at (404) 997-4577, or me at (404) 997-4511.  


                  OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
T. Preston Gillespie, Jr.                     3
T. Preston Gillespie, Jr.  
In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be
3  
available electronically for public inspection in the NRC Public Document Room or from the
Publicly Available Records (PARS) component of NRC's document system, ADAMS.
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the
Public Electronic Reading Room). However, because of the security-related concerns
In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be  
contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters
available electronically for public inspection in the NRC Public Document Room or from the  
enclosure will not be available for public inspection.
Publicly Available Records (PARS) component of NRC's document system, ADAMS.  
                                                Sincerely,
                                                /RA/
ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the  
                                                Michael F. King, Chief
Public Electronic Reading Room). However, because of the security-related concerns  
                                                Engineering Branch 2
contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters  
                                                Division of Reactor Safety
enclosure will not be available for public inspection.
Docket No.: 50-269, 50-270, 50-287
License No.: DPR-38, DPR-47, DPR-55
Sincerely,  
Enclosure:
Document Request For Cyber Security Temporary
Instruction (TI) 2201/004 Interim Milestones 1-7 Inspection
(OFFICIAL USE ONLY)
cc: (See page 4)
                  OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
/RA/  
Michael F. King, Chief  
Engineering Branch 2  
Division of Reactor Safety
Docket No.: 50-269, 50-270, 50-287  
License No.: DPR-38, DPR-47, DPR-55  
Enclosure:  
Document Request For Cyber Security Temporary  
Instruction (TI) 2201/004 Interim Milestones 1-7 Inspection
(OFFICIAL USE ONLY)  
cc: (See page 4)  




_________________________               xG SUNSI REVIEW COMPLETE G FORM 665 ATTACHED
_________________________  
OFFICE             RII:DRS       RII:DRS       RII:DRS
  SIGNATURE           *RA         RA           RA
xG SUNSI REVIEW COMPLETE G FORM 665 ATTACHED  
  NAME               PATEL         FANNER       KING
OFFICE  
  DATE                   2/25/2013     2/25/2013     2/27/2013
RII:DRS  
  E-MAIL COPY?         YES     NO    YES     NO  YES     NO     YES  NO    YES     NO   YES   NO    YES   NO
RII:DRS  
       
RII:DRS  
                OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
   
T. Preston Gillespie, Jr.            4
cc:                                        David G. Black
Robert H. Guy                              Fleet Security Manager
Organizational Effectiveness Manager        General Office
SIGNATURE  
Oconee Nuclear Station                      Duke Energy Corporation
    *RA  
Duke Energy Corporation                    P. O. Box 1006
RA  
7800 Rochester Highway                      526 S. Church Street
RA  
Seneca, SC 29672                            Charlotte, NC 28201-1006
   
Terry L. Patterson                          Timothy J. Wadsworth
Safety Assurance Manager                    Security Specialist
Duke Energy Corporation                    General Office
Oconee Nuclear Station                      Duke Energy Corporation
NAME  
7800 Rochester Highway                      P. O. Box 1006
PATEL  
Seneca, SC 29672                            526 S. Church St., EC05P
FANNER  
                                            Charlotte, NC 28201-1006
KING  
Kent Alter
   
Regulatory Compliance Manager              David A. Cummings
Oconee Nuclear Station                      Associate General Counsel
Duke Energy Corporation                    General Office
ON03RC                                      Duke Energy Corporation
DATE  
7800 Rochester Highway                      P.O. Box 1006
2/25/2013  
Seneca, SC 29672                            526 S. Church St., EC07H
2/25/2013  
                                            Charlotte, NC 28201-1006
2/27/2013  
Terry W. King
   
Security Manager
Oconee Nuclear Station
Duke Energy Corporation
7800 Rochester Highway
E-MAIL COPY?  
Seneca, SC 29672
     YES  
Daniel C. Durham
NO    
Security Safeguards Administrator
   YES  
Oconee Nuclear Station
NO       YES  
Duke Energy Corporation
NO   
7800 Rochester Highway
   YES
Seneca, SC 29672
NO     
M. Christopher Nolan
  YES  
Director - Regulatory Affairs
NO       YES  
General Office
NO     
Duke Energy Corporation
  YES  
P. O. Box 1006
NO    
526 S. Church Street
Charlotte, NC 28201-1006
                OFFICIAL USE ONLY - SECURITY RELATED INFORMATION


                OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION  
Letter to T. Preston Gillespie, Jr. from Michael F. King dated February 27, 2013.
T. Preston Gillespie, Jr.
SUBJECT:       OCONEE NUCLEAR STATION - NOTIFICATION OF CYBER SECURITY TI
4
                MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC
                INSPECTION REPORT NO. 05000269/2013406 AND 05000270/2013406 AND
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
                05000287/2013406)
Distribution:
cc:
RidsNrrPMOconee Resource
Robert H. Guy
B. Westreich, NSIR (hard copy w/ encl)
Organizational Effectiveness Manager
RIDSNRRDIRS
Oconee Nuclear Station
Distribution w/encl:
Duke Energy Corporation
7800 Rochester Highway
Seneca, SC  29672
Terry L. Patterson
Safety Assurance Manager
Duke Energy Corporation
Oconee Nuclear Station
7800 Rochester Highway
Seneca, SC  29672
Kent Alter
Regulatory Compliance Manager
Oconee Nuclear Station
Duke Energy Corporation
ON03RC
7800 Rochester Highway
Seneca, SC  29672
Terry W. King
Security Manager
Oconee Nuclear Station
Duke Energy Corporation
7800 Rochester Highway
Seneca, SC  29672
Daniel C. Durham
Security Safeguards Administrator
Oconee Nuclear Station
Duke Energy Corporation
7800 Rochester Highway
Seneca, SC  29672
M. Christopher Nolan
Director - Regulatory Affairs
General Office
Duke Energy Corporation
P. O. Box 1006
526 S. Church Street
Charlotte, NC  28201-1006
David G. Black
Fleet Security Manager
General Office
Duke Energy Corporation
P. O. Box 1006
526 S. Church Street
Charlotte, NC  28201-1006
Timothy J. Wadsworth
Security Specialist
General Office
Duke Energy Corporation
P. O. Box 1006
526 S. Church St., EC05P
Charlotte, NC  28201-1006
David A. Cummings
Associate General Counsel
General Office
Duke Energy Corporation
P.O. Box 1006
526 S. Church St., EC07H
Charlotte, NC  28201-1006
 
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
Letter to T. Preston Gillespie, Jr. from Michael F. King dated February 27, 2013.  
SUBJECT:
OCONEE NUCLEAR STATION - NOTIFICATION OF CYBER SECURITY TI  
MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC  
INSPECTION REPORT NO. 05000269/2013406 AND 05000270/2013406 AND  
05000287/2013406)  
Distribution:  
RidsNrrPMOconee Resource
B. Westreich, NSIR (hard copy w/ encl)  
RIDSNRRDIRS  
Distribution w/encl:  
PUBLIC
PUBLIC
                OFFICIAL USE ONLY - SECURITY RELATED INFORMATION
}}
}}

Latest revision as of 10:47, 11 January 2025

IR 05000269-13-406, 05000270-13-406 and 05000287-13-406, on May 20-24, 2013, Oconee Nuclear Station - Notification of Cyber Security Milestones 1-7 Inspection and Request for Information
ML13058A319
Person / Time
Site: Oconee  Duke Energy icon.png
Issue date: 02/27/2013
From: Mark King
NRC/RGN-II/DRS/EB2
To: Gillespie T
Duke Energy Corp
References
IR-13-406
Download: ML13058A319 (6)


See also: IR 05000269/2013406

Text

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

UNITED STATES

NUCLEAR REGULATORY COMMISSION

REGION II

245 PEACHTREE CENTER AVENUE NE, SUITE 1200

ATLANTA, GEORGIA 30303-1257

Enclosure transmitted herewith contains SUNSI. When separated from enclosure, this

transmittal document is decontrolled

LIMITED INTERNAL

DISTRIBUTION PERMITTED

OFFICIAL USE ONLY - SECURITY-RELATED INFORMATION

February 27, 2013

Mr. T. Preston Gillespie, Jr.

Site Vice President

Duke Energy Corporation

Oconee Nuclear Station

7800 Rochester Highway

Seneca, SC 29672-0752

SUBJECT:

OCONEE NUCLEAR STATION - NOTIFICATION OF CYBER SECURITY TI

MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC

INSPECTION REPORT NO. 05000269/2013406 AND 05000270/2013406 AND

05000287/2013406)

The purpose of this letter is to notify you that the U.S. Nuclear Regulatory Commission (NRC)

Region II (RII) staff will conduct an inspection of the Cyber Security Milestones 1-7 requirements

specified by the conditions of your operating license at the Oconee Nuclear Station on May 20 -

24, 2013. The inspection team will be led by Mr. Jigar Patel, Reactor Inspector, of the NRC RII

office. The team will be composed of personnel from the NRC RII office and personnel from the

NRC office of Nuclear Security and Incident Response (NSIR). The inspection will be

conducted in accordance with Temporary Instruction (TI) 2201/004, Inspection of

Implementation of Interim Cyber Security Milestones 1-7. The TI inspection will be performed

to evaluate and verify your ability to meet the interim milestone requirements of the NRCs

Cyber Security Rule, Title 10, Code of Federal Regulations (CFR), Part 73, Section 54,

Protection of Digital Computer and Communication Systems and Networks.

In accordance with 10 CFR 73.54, each nuclear power plant licensee was required to submit

a proposed cyber security plan (CSP) and implementation schedule for NRC review and

approval. On December 14, 2009, by letter (ML093080517) to the Nuclear Energy Institute

(NEI), the NRC provided their expectations for the proposed implementation schedule. On

January 5, 2011, by letter (ML110060093) to the NRC, NEI issued an initial Template for the

Cyber Security Plan Implementation Schedule (ML110060097). On February 28, 2011, by

letter (ML110600206) to the NRC, NEI provided a revised, Template for the Cyber Security

Plan Implementation Schedule. The purpose of the letters attachment was to provide the

licensee with a generically written template to develop their proposed CSP implementation

schedule. Utilization of the generic template required the licensee to make conforming changes

to ensure the submitted schedule accurately accounted for site-specific activities. The CSP,

implementation schedule, and other applicable information for your facility provided the

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

T. Preston Gillespie, Jr.

2

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

implementation aspects, including the key intermediate milestone attributes and dates as well

as the full implementation dates. The implementation aspects were described based, in part, on

letters to the NRC dated November 20, 2009 (ML093410249), August 16, 2010

(ML1023001680, ML1023001681) and supplemented by letters dated September 27, 2010,

March 7, 2011, April 15, 2011 (ML111090627), and August 9, 2011 (ML11109A0741). By

reference to letter dated August 31, 2011 (ML11216A064), license condition 3.E was modified

for facility operating licenses DPR-38, DPR-47, and DPR-55 for Oconee Units 1, 2, and 3 to

ensure that the CSP would be implemented and maintained consistent with NRC requirements.

On February 21, 2013, during a conversation between Ms. Judy Smith of your staff, and

Mr. Jigar Patel, NRC RII, our respective staffs confirmed arrangements for a three day

information gathering onsite visit and a one-week onsite inspection. The subject TI inspection

provides a programmatic level review and verification of the licensees site-specific

implementation of Interim Milestones 1 through 7. The schedule for the onsite TI Inspection for

the Interim Milestones 1 through 7 is as follows:

Information gathering visit: May 7 - 9, 2013

Onsite inspection: May 20 - 24, 2013

The purpose of the information gathering visit is to: (1) obtain information and documentation

needed to support the TI inspection; (2) become familiar with the Oconee Nuclear Station Cyber

Security Program and plant layout; and (3) arrange administrative details, such as office space,

availability of knowledgeable office personnel and to ensure unescorted site access privileges.

In order to assure a productive TI inspection, we have enclosed a request for documents

needed to ensure the inspectors are adequately prepared. These documents have been

divided into three groups (I, II, & III). Group I lists information necessary to aid the inspectors in

planning for the TI inspection prior to the information gathering visit. It is requested that this

information be provided to the lead inspector via mail no later than April 10, 2013. Group II lists

information and possible areas for discussion necessary to assist the inspectors during the

TI inspection. It is requested this information be available during the information gathering visit

(May 7, 2013). Group III consists of those items that the inspectors will review, or need access

to, during the TI inspection. Group III also lists the information necessary to aid the inspectors

in tracking questions and answers identified as a result of the TI inspection. It is requested that

this information be provided to the lead inspector as the information is generated during the

TI inspection. It is important that all of these documents are up to date and complete in order to

minimize the number of additional documents requested during the preparation and/or the

onsite portions of the TI inspection.

This letter does not contain new or amended information collection requirements subject to the

Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.). Existing information collection

requirements were approved by the Office of Management and Budget, control number 3150-

0011. The NRC may not conduct or sponsor, and a person is not required to respond to, a

request for information or an information collection requirement unless the requesting document

displays a currently valid Office of Management and Budget control number.

Your cooperation and support during this inspection will be appreciated. If you have questions

concerning this inspection, or the inspection team's information or logistical needs, please

contact Mr. Patel at (404) 997-4577, or me at (404) 997-4511.

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

T. Preston Gillespie, Jr.

3

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter will be

available electronically for public inspection in the NRC Public Document Room or from the

Publicly Available Records (PARS) component of NRC's document system, ADAMS.

ADAMS is accessible from the NRC Website at http://www.nrc.gov/reading-rm/adams.html (the

Public Electronic Reading Room). However, because of the security-related concerns

contained in the enclosure, and in accordance with 10 CFR 2.390, a copy of this letters

enclosure will not be available for public inspection.

Sincerely,

/RA/

Michael F. King, Chief

Engineering Branch 2

Division of Reactor Safety

Docket No.: 50-269, 50-270, 50-287

License No.: DPR-38, DPR-47, DPR-55

Enclosure:

Document Request For Cyber Security Temporary

Instruction (TI) 2201/004 Interim Milestones 1-7 Inspection

(OFFICIAL USE ONLY)

cc: (See page 4)

_________________________

xG SUNSI REVIEW COMPLETE G FORM 665 ATTACHED

OFFICE

RII:DRS

RII:DRS

RII:DRS

SIGNATURE

  • RA

RA

RA

NAME

PATEL

FANNER

KING

DATE

2/25/2013

2/25/2013

2/27/2013

E-MAIL COPY?

YES

NO

YES

NO YES

NO

YES

NO

YES

NO YES

NO

YES

NO

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

T. Preston Gillespie, Jr.

4

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

cc:

Robert H. Guy

Organizational Effectiveness Manager

Oconee Nuclear Station

Duke Energy Corporation

7800 Rochester Highway

Seneca, SC 29672

Terry L. Patterson

Safety Assurance Manager

Duke Energy Corporation

Oconee Nuclear Station

7800 Rochester Highway

Seneca, SC 29672

Kent Alter

Regulatory Compliance Manager

Oconee Nuclear Station

Duke Energy Corporation

ON03RC

7800 Rochester Highway

Seneca, SC 29672

Terry W. King

Security Manager

Oconee Nuclear Station

Duke Energy Corporation

7800 Rochester Highway

Seneca, SC 29672

Daniel C. Durham

Security Safeguards Administrator

Oconee Nuclear Station

Duke Energy Corporation

7800 Rochester Highway

Seneca, SC 29672

M. Christopher Nolan

Director - Regulatory Affairs

General Office

Duke Energy Corporation

P. O. Box 1006

526 S. Church Street

Charlotte, NC 28201-1006

David G. Black

Fleet Security Manager

General Office

Duke Energy Corporation

P. O. Box 1006

526 S. Church Street

Charlotte, NC 28201-1006

Timothy J. Wadsworth

Security Specialist

General Office

Duke Energy Corporation

P. O. Box 1006

526 S. Church St., EC05P

Charlotte, NC 28201-1006

David A. Cummings

Associate General Counsel

General Office

Duke Energy Corporation

P.O. Box 1006

526 S. Church St., EC07H

Charlotte, NC 28201-1006

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

OFFICIAL USE ONLY - SECURITY RELATED INFORMATION

Letter to T. Preston Gillespie, Jr. from Michael F. King dated February 27, 2013.

SUBJECT:

OCONEE NUCLEAR STATION - NOTIFICATION OF CYBER SECURITY TI

MILESTONES 1-7 INSPECTION AND REQUEST FOR INFORMATION (NRC

INSPECTION REPORT NO. 05000269/2013406 AND 05000270/2013406 AND

05000287/2013406)

Distribution:

RidsNrrPMOconee Resource

B. Westreich, NSIR (hard copy w/ encl)

RIDSNRRDIRS

Distribution w/encl:

PUBLIC