IR 05000247/2015405

IR 05000247/2015405 and 05000286/2015405; 09/28/2015 to 10/02/2015; Entergy Nuclear Operations, Inc.; Indian Point Energy Center; Temporary Instruction 2201/004, Inspection of Implementation of Interim Cyber Security Milestones 1-7 (Letter

ML15295A050
Person / Time
Site:	Indian Point
Issue date:	10/21/2015
From:	Rogge J F Engineering Region 1 Branch 3
To:	Coyle L Entergy Nuclear Operations
References
IR 2015405
Download: ML15295A050 (4)

Text

October 21, 2015

Mr. Lawrence Coyle Site Vice President Entergy Nuclear Operations, Inc. Indian Point Energy Center 450 Broadway, GSB P.O. Box 249 Buchanan, NY 10511-0249

SUBJECT: INDIAN POINT NUCLEAR GENERATING UNITS 2 AND 3 - TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7," REPORTS 05000247/2015405 AND 05000286/2015405

Dear Mr. Coyle:

On October 2, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed a security temporary instruction inspection at your Indian Point Nuclear Generating, Units 2 and 3. The inspection covered the implementation of interim milestones associated with your cyber security program, as outlined in your approved cyber security plan (CSP) and described in Temporary Instruction (TI) 2201/004, "Inspection of Implementation of Interim Cyber Security Milestones 1-7." The enclosed inspection report documents the inspection results, which were discussed on October 2, 2015, with Mr. John Kirkpatrick, Director Regulatory and Performance Improvement, and other members of your staff. The inspection examined activities conducted under your license as they relate to safety and compliance with the Commission's rules and regulations and with the conditions of your license related to the implementation of interim cyber security milestones. The inspection was conducted in accordance with NRC TI 2201/004. The team reviewed selected procedures and records, observed activities, and interviewed personnel. The report documents one violation for which the NRC is exercising enforcement discretion. The NRC is not taking enforcement action for this violation because it meets the criteria established in an NRC Memorandum from Barry C. Westreich, Director, Cyber Security Directorate, Office of Nuclear Security and Incident Response, to each regional office and Director, Division of Reactor Safety, Subject: Enhanced Guidance for Licensee Near-Term Corrective Actions to Address Cyber Security Inspection Findings and Licensee Eligibility for "Good-Faith" Attempt Discretion, dated July 1, 2013 (ADAMS Accession Number ML13178A203). Consistent with the NRC Memorandum, upon completion of all corrective actions, you are requested to provide written notification to the NRC's regional office as to the date of closure for the identified issues. Enclosure contains Sensitive Unclassified Non-Safeguards Information. When separated from enclosure, the transmittal document is decontrolled. 2 In accordance with Title 10 of the Code of Federal Regulation (10 CFR) 2.390 of the NRC's "Rules of Practice," a copy of this letter will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's Agencywide Document Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room). However, the material enclosed herewith contains Security-Related Information in accordance with 10 CFR 2.390(d)(1) and its disclosure to unauthorized individuals could present a security vulnerability. Therefore, the material in the enclosure will not be made available electronically for public inspection in the NRC Public Document Room or from the PARS component of NRC's ADAMS. If you choose to provide a response and Security-Related Information is necessary to provide an acceptable response, please mark your entire response "Security-Related Information - Withhold From Public Disclosure Under 10 CFR 2.390" in accordance with 10 CFR 2.390(d)(1) and follow the instructions for withholding in 10 CFR 2.390 (b)(1). In accordance with 10 CFR 2.390(b)(1)(ii), the NRC is waiving the affidavit requirements for your response.

Sincerely,/RA/ John F. Rogge, Chief Engineering Branch 3 Division of Reactor Safety Docket Nos. 50-247 and 50-286 License Nos. DPR-26 and DPR-64

Enclosure:

Inspection Reports 05000247/2015405 and 05000286/2015405

w/Attachment:

Supplemental Information cc w/o encl; w/o OUO-SRI: Distribution via ListServ cc w/encl; w/OUO-SRI: D. Gagnon, Site Security Manager A. Peterson, State Liaison Office Designee, NY State Energy, Research & Development Authority

ML15295A050 (Cover letter) ADAMS ACCESSION NUMBER: ML15295A044 (Cover letter w/encl) Non-Public Designation Category: MD 3.4 Non-Public A.3 Cover Letter SUNSI Review X Non-Sensitive Sensitive X Publicly Available Non-Publicly Available Cover Letter w/Enclosure SUNSI Review Non-Sensitive X Sensitive Publicly Available X Non-Publicly Available OFFICE RI/DRS RI/DRS RI/DRS NAME JRady DOrr/DO JRogge DATE 10/21/15 10/21/15 10/21/15 A-i Letter to Mr. Lawrence Coyle from John Rogge

SUBJECT: INDIAN POINT NUCLEAR GENERATING UNITS 2 AND 3 - TEMPORARY INSTRUCTION 2201/004, "INSPECTION OF IMPLEMENTATION OF INTERIM CYBER SECURITY MILESTONES 1-7," REPORTS 05000247/2015405 AND 05000286/2015405 Distribution w/o encl; w/o OUO-SRI: (via E-mail) DDorman, RA (R1ORAMAIL RESOURCE) DLew, DRA (R1ORAMAIL RESOURCE) MScott, DRP (R1DRPMAIL RESOURCE) JColaccino, DRP (R1DRPMAIL RESOURCE) RLorson, DRS (R1DRSMAIL RESOURCE) GSuber, DRS (R1DRSMAIL RESOURCE) GDentel, DRP MDraxton, DRP JSchussler, DRP BPinson, DRP GNewman, DRP, SRI SRich, DRP, RI DHochmuth, DRP, AA JJessie, RI OEDO RidsNrrPMIndianPoint Resource RidsNrrDorlLpl1-1 Resource ROPReports Resources Distribution w/encl; w/OUO-SRI JWillis, NSIR NSimonian, NSIR EWharton, NSIR SShaeffer, DRS, RII RDaley, DRS, RIII GWerner, DRS, RIV GDentel, DRP MDraxton, DRP, SRI