Document: NUREG-0800
Document ID: 6714076f-86e8-4770-bb1a-5fea3d3bc956
Document Type: srp
Title: CYBER SECURITY PLAN
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1026/ML102630477.pdf
Revision Date: 2023-06
Chapter: 13
Section ID: 13.6.6
CFR Part: 
CFR Title: 

Content:
security program into the physical protection program (10 CFR 73.54(b)(3)) 10. a discussion of policies and implementing procedures for the cyber security program (10 CFR 73.54(f)) 11. a discussion of continuous monitoring and assessment (10 CFR 73.54(b)(2) and 10 CFR 73.54(d)(2)) 12. a discussion of periodic assessment of security controls (10 CFR 73.54(b)(2) and 10 CFR 73.54(d)(2)) 13. a discussion of effectiveness analysis (10 CFR 73.54(b)(2) and 10 CFR 73.54(d)(2)) 13.6.6-3 Revision 0 – November 2010 14. a discussion of vulnerability assessments and scans (10 CFR 73.54(b)(2) and 10 CFR 73.54(d)(2)) 15. a discussion of change control processes (10 CFR 73.54(d)(3)) 16. a discussion of configuration management (10 CFR 73.54(d)(3), 10 CFR 73.54 (f), and 10 CFR 73.54 (g)) 17. a discussion of the security impact analysis of changes (10 CFR 73.54(d)(3)) 18. a discussion of security reassessment and authorization (10 CFR 73.54(d)(3)) 19. a discussion of the updating of cyber security practices (10 CFR 73.54(f)) 20. a discussion of the review and validation testing of a modification or addition of a CDA (10 CFR 73.54(d)(3)) 21. a discussion of the application of security controls associated with a modification or addition (10 CFR 73.54(c)(1) and 10 CFR 73.54(d)(3)) 22. a discussion of the cyber security program review (10 CFR 73.54(g)) 23. a discussion of document control and records retention and handling (10 CFR 73.54(h)) Operational Program Description and Implementation For a combined license (COL) application, the NRC staff reviews the CSP description and the proposed implementation milestones. The NRC staff also reviews the table of operational programs required by NRC regulations in the final safety analysis report (FSAR) to ensure that the CSP and associated milestone is included. Review Interfaces Other required Standard Review Plan (SRP) sections interface with this section as follows: 1. SRP Section 13.6, “Physical Security” 2. SRP Section 13.4,