Document: NUREG-0800
Document ID: 496a8650-7c3b-4111-a527-d49e2f61ae5c
Document Type: srp
Title: PHYSICAL SECURITY—COMBINED LICENSE AND OPERATING REACTORS
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1729/ML17291B265.pdf
Revision Date: 2023-06
Chapter: 13
Section ID: 13.6.1
CFR Part: 
CFR Title: 

Content:
tablished and implemented a process for identifying and grouping target sets. The plan should confirm that a process exists for the oversight of target-set equipment and systems that includes handling configuration changes that could change the licensee’s protective strategy. The plan should also confirm that the details of this process are in implementing procedures. The physical security plan shall describe the process the licensee has established and implemented to develop and identify target sets, including a description of how target sets are identified and grouped. This description should generally identify the types of 13.6.1-56 Revision 2 – August 2018 subject-matter experts who are used to perform the analysis needed and the minimum areas of technical expertise/knowledge that will be represented by the assembled subject-matter experts. The physical security plan shall confirm that cyber-attacks were considered during the development and identification of target sets and that the specific cyber security measures that are used to provide protection against cyber-attacks are contained in a cyber-security plan required by 10 CFR 73.54. Additional guidance is provided in RG 5.71, “Cyber Security Program for Nuclear Facilities.” The physical security plan shall confirm that the licensee’s protective strategy accounts for target-set equipment that is not located within a protected or vital area. The physical security plan should generally address how such target-set equipment is handled within the response strategy and how this equipment is accounted for in drills and exercise scenarios. The physical security plan should also explain how changes to target sets, where appropriate, are coordinated between operations and security, documented in ways consistent with the safety/security interface requirements contained in 10 CFR 73.58, and accounted for in changes to the licensee’s protective strategy where needed. The physical security plan shall confirm