Abstract
The chapter is devoted to the consideration of the issues concerning the cyber security assurance of NPP instrumentation and control systems. A brief overview of the international regulatory framework in the field of cyber security for nuclear facilities is given. The different approaches to the categorization of NPP instrumentation and control systems by cyber security are expressed. The basic principles of cyber security assurance of NPP instrumentation and control systems are considered. The specific measures of cyber security assurance (i.e., graded according to the cyber security levels) on the stages of development, implementation, and operation of NPP instrumentation and control systems are presented.
TopRegulatory Framework
The international regulatory framework in the field of cyber security of NPP I&C systems is formed based on:
- •
general requirements to NPP I&C systems;
- •
industrial standards on cyber security of networks and computerized systems;
- •
standards and guides on nuclear security (because cyber security is a part of nuclear security of nuclear facilities); and
- •
standards on information security (because cyber security is a specific aspect of information security).
Key Terms in this Chapter
Defense in Depth: The combination of successive layers of systems and measures for the protection of targets from nuclear security threats.
Cyber Security Policy: Aggregate of directives, regulations, rules, and practices that prescribes how an organization manages and protects computers and computer systems.
Cyber Security Incident: An occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of a computer-based, networked or digital information system or the information that the system processes, stores, or transmits or that constitutes a violation or imminent risk of violation of security policies, security procedures, or acceptable use policies.
NPP I&C Safety: A part of nuclear and radiation safety, relating to jointly operating I&C systems and manufacturing equipment of NPP power units and depending on proper operation of the I&C systems.
Information Security: The preservation of the confidentiality, integrity, and availability of information.
NPP Nuclear and Radiation Safety: A feature of non-exceeding determined limits of radiation effects on personnel, the population and the environment under NPP normal operation, operational events and design basis accidents and also of restricting radiation effects in beyond design basis accidents.