Document: NUREG-0800
Document ID: 6714076f-86e8-4770-bb1a-5fea3d3bc956
Document Type: srp
Title: CYBER SECURITY PLAN
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1026/ML102630477.pdf
Revision Date: 2023-06
Chapter: 13
Section ID: 13.6.6
CFR Part: 
CFR Title: 

Content:
73.54, including the audit of the effectiveness of the cyber security program at least every 24 months, as required by 10 CFR 73.55(m); safety and security interface, as required by 10 CFR 73.58; and reporting requirements, as required by Appendix G to 10 CFR Part 73. The implementation milestones for this program are included within the license condition on program implementation. The CSP has been reviewed for format and content utilizing the NRC CSP template, found to contain all features considered essential of such a program by the NRC staff, and is acceptable. In particular, it has been found to comply with the Commission’s regulations, including 10 CFR 73.54, 10 CFR 73.55(a)(1), 10 CFR 73.55(b)(8), 10 CFR 73.55(m), 10 CFR 73.58, and Appendix G to 10 CFR Part 73, and it conforms to the applicable regulatory positions set forth in RG 5.71. For COL reviews, the following license condition for operational programs should be added to the license: The applicant/licensee described the CSP and its implementation in conformance with 10 CFR 73.54, 10 CFR 73.55(a)(1), 10 CFR 73.55(b)(8), 10 CFR 73.55(m), 10 CFR 73.58, and Appendix G to 10 CFR Part 73. The license condition on operational program implementation includes the program and its implementation milestones. V. IMPLEMENTATION The following provides guidance to applicants and licensees regarding the NRC staff=s plans for using this SRP section. The NRC staff will use this SRP section when reviewing the CSP submittals of license amendment applications and license applications submitted by applicant/licensees in accordance with 10 CFR Part 50, “Domestic Licensing of Production and Utilization Facilities,” and 10 CFR Part 52, “Licenses, Certifications, and Approvals for Nuclear Power Plants.” Except when the applicant/licensee proposes an acceptable alternative method for complying with specified portions of the Commission=s regulations, the NRC staff will use the method described herein to evaluate