Document: 10 CFR Part 73
Document ID: 2c582f64-f8cb-4316-a92f-b6eec6cc0d2a
Document Type: cfr
Title: Protection of digital computer and communication systems and networks.
Source: 10 CFR Part 73
Source URL: https://www.ecfr.gov/current/title-10/part-73/section-73.54
Revision Date: 
Chapter: 
Section ID: 73.54
CFR Part: 73
CFR Title: 10

Content:
curity program requirements of this section. ( 1 ) The cyber security plan must describe how the requirements of this section will be implemented and must account for the site-specific conditions that affect implementation. ( 2 ) The cyber security plan must include measures for incident response and recovery for cyber attacks. The cyber security plan must describe how the licensee will: ( i ) Maintain the capability for timely detection and response to cyber attacks; ( ii ) Mitigate the consequences of cyber attacks; ( iii ) Correct exploited vulnerabilities; and ( iv ) Restore affected systems, networks, and/or equipment affected by cyber attacks. ( f ) The licensee shall develop and maintain written policies and implementing procedures to implement the cyber security plan. Policies, implementing procedures, site-specific analysis, and other supporting technical information used by the licensee need not be submitted for Commission review and approval as part of the cyber security plan but are subject to inspection by NRC staff on a periodic basis. ( g ) The licensee shall review the cyber security program as a component of the physical security program in accordance with the requirements of § 73.55(m) , including the periodicity requirements. ( h ) The licensee shall retain all records and supporting technical documentation required to satisfy the requirements of this section as a record until the Commission terminates the license for which the records were developed, and shall maintain superseded portions of these records for at least three (3) years after the record is superseded, unless otherwise specified by the Commission. [ 74 FR 13970 , Mar. 27, 2009, as amended at 80 FR 67275 , Nov. 2, 2015]