Document: NUREG-0800
Document ID: 6714076f-86e8-4770-bb1a-5fea3d3bc956
Document Type: srp
Title: CYBER SECURITY PLAN
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1026/ML102630477.pdf
Revision Date: 2023-06
Chapter: 13
Section ID: 13.6.6
CFR Part: 
CFR Title: 

Content:
r 2010 F. any other threatened, attempted, or committed act not previously defined in Appendix G to 10 CFR Part 73 with the potential for reducing the effectiveness of the safeguards system below that committed to in a licensed physical security or contingency plan or the actual condition of such reduction in effectiveness 5. As required by 10 CFR 73.58(b), licensees must assess and manage the potential for adverse effects on safety and security, including the site emergency plan, before implementing changes to plant configurations, facility conditions, or security. The scope of changes to be assessed and managed must include planned and emergent activities (such as, but not limited to, physical modifications, procedural changes, changes to operator actions or security assignments, maintenance activities, system reconfiguration, access modification or restrictions, and changes to the security plan and its implementation). If potential conflicts are identified, the licensee must communicate them to appropriate licensee personnel and take compensatory or mitigative actions or both to maintain safety and security under applicable Commission regulations, requirements, and license conditions. Operational Programs For COL reviews, the NRC staff will review the description of the operational program and proposed implementation milestone for the CSP in accordance with 10 CFR 73.54. The implementation milestone occurs before fuel arrives on-site. Technical Rationale The following paragraphs discuss the technical rationale for applying these acceptance criteria to the review of this SRP section. 1. The NRC regulations at 10 CFR 73.54 include the cyber security program requirements for power reactor licensees. Subsequent to the events of September 11, 2001, the NRC issued orders to require power reactor licensees to implement measures to enhance cyber security. These security measures require an assessment of cyber systems and the implementation of corrective measures