Document: NUREG-0800
Document ID: 6714076f-86e8-4770-bb1a-5fea3d3bc956
Document Type: srp
Title: CYBER SECURITY PLAN
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1026/ML102630477.pdf
Revision Date: 2023-06
Chapter: 13
Section ID: 13.6.6
CFR Part: 
CFR Title: 

Content:
r security program. 3. As required by 10 CFR 73.55(m)(2), an audit of the effectiveness of the cyber security program must be conducted. 4. Appendix G to 10 CFR Part 73 requires licensees to report or record, as appropriate, the following safeguards events: A. any event in which there is reason to believe that a person has committed or caused, or attempted to commit or cause, or has made a credible threat to commit or cause: i. significant physical damage to a power reactor ii. interruption of normal operation of a licensed nuclear power reactor through the unauthorized use of or tampering with its machinery, components, or controls including the security system B. any failure, degradation, or the discovered vulnerability in a safeguard system that could allow unauthorized or undetected access to a protected area or vital area for which compensatory measures have not been employed. C. An actual entry of an unauthorized person into a protected area D. The actual or attempted introduction of contraband into a protected area E. any failure, degradation, or discovered vulnerability in a safeguards system that could have allowed unauthorized or undetected access to a protected area or vital area had compensatory measures not been established 1 The SRP is not a substitute for the NRC’s regulations, and compliance with it is not required. However, in accordance with 10 CFR 50.34(h), an applicant/licensee is required to identify differences between the design features, analytical techniques, and procedural measures proposed for its facility and the SRP acceptance criteria. The applicant/licensee must also evaluate how the proposed alternatives to the SRP acceptance criteria provide an acceptable method of complying with the NRC regulations. 13.6.6-5 Revision 0 – November 2010 F. any other threatened, attempted, or committed act not previously defined in Appendix G to 10 CFR Part 73 with the potential for reducing the effectiveness of the safeguards system below that