Oct. 23--SHIPPINGPORT -- FirstEnergy officials say two cybersecurity risks found at the Beaver Valley Nuclear Power Station last month didn't pose a threat to public health or safety.
"The findings do not involve any breach of plant security, computer systems or ability to safely operate the plant, and they do not pose a risk to public health and safety," said company spokeswoman Jennifer Young on Wednesday. She also said "actions are in progress to address" the findings.
Nuclear Regulatory Commission officials found the two problems with the Shippingport plant's cybersecurity program Sept. 13.
While the NRC did issue two violations, the regulatory agency will not take enforcement action at this point to allow the company, and other nuclear power plant owners, to fully adapt to the NRC's new cybersecurity requirements, said NRC spokesman Neil Sheehan.
But this is only a temporary approach, he said.
"That enforcement discretion will only take place during this phase-in period," he said. The NRC does not provide details of the two issues for security reasons.
FirstEnergy officials said the plant is currently implementing cybersecurity safety measures, part of the NRC's pilot cyber security inspection program.
"Beaver Valley, along with the rest of the industry, has been implementing and improving cyber security controls since 2002," Young said. "The plant is a robust facility that is well protected from possible cyber threats. However, we continually implement measures to further enhance the safe and secure operations of the plant and will continue to address cyber security controls at part of this process."
She also said that the Beaver Valley plant's safety and control systems are stand-alone internal system that are not connected to the company's business network or the Internet. The plant's extensive use of analog controls makes it not susceptible to hacking or cyberattacks, she said.
"Analog controls are completely separated from the Internet or other computers, so the equipment cannot be affected from hacking or cyberattacks," Young said. "Analog controls require direct physical contact to be altered."
Copyright 2013 - Beaver County Times, Pa.