ML22186A045
| ML22186A045 | |
| Person / Time | |
|---|---|
| Issue date: | 06/28/2022 |
| From: | Ismael Garcia NRC/NSIR/DPCP |
| To: | |
| Garcia I | |
| Shared Package | |
| ML22182A443 | List: |
| References | |
| Download: ML22186A045 (11) | |
Text
NRC FORM 390 (03-2022)
NRCMD 3.9 U.S. NUCLEAR REGULATORY COMMISSION RELEASE TO PUBLISH UNCLASSIFIED NRC STAFF SPEECHES, PRESENTATIONS, PAPERS, AND JOURNAL ARTICLES
- 1. Title (State in full as it appears on the speech, presentation, paper, or journal article)
- 2. ADAMS Accession No. (Use Template ADM 039)
- 3. Author(s)
- 4. Name of Conference, Location, and Date(s)
- 5. Name of Publication
- 6. Name and Address of the Publisher
- 7. Telephone Number of the Publisher (Enter 10 numeric digits)
Yes No
- 8. Page Changes If yes, the Authorizing Official (listed in block 12 below) must approve payment before the paper is sent for publication. If payment is not authorized NRC may refuse to pay the page changes, and the author will become personally responsible.
- 9. Estimated Cost No. of Pages
@ $ Per Page
= Total Yes No
- 10. Certification (Answer all Questions)
A. Technical and Policy Reviews Speeches, presentations, papers, and journal articles require management and policy reviews of technical and policy issues per NRC Directive Handbook 3.9,Section II.A.2. Check the "YES" box to certify that the speech, presentation, paper, or journal article complies with this statement.
B. Copyrighted Material Does this speech, presentation, paper, or journal article contain copyrighted material?
If yes, attach a letter of release from the source that holds the copyright.
C. Patent Clearance Does this speech, presentation, paper, or journal article require patent clearance?
If yes, the NRC Patent Counsel must signify clearance by signing below.
NRC Patent Counsel (Type or print name)
Signature and Date D. Reference Availability Is all material referenced in this speech, presentation, paper, or journal article available to the public either through a public library, the Government Publishing Office, the National Technical Information Service, or the NRC Public Document Room? If no, list below the specific availability of each referenced document.
Specific Availability E. Metric Unit Conversion Does this speech, presentation, paper, or journal article contain measurement and weight values? If yes, all must be converted to the International System of Units, followed by the English units in brackets, pursuant to the NRC Policy Statement implementing the Omnibus Trade and Competitiveness Act of 1988, Executive Order 12770, July 25, 1991.
- 11. Responsible Staff Member Name (Type or print name)
Office/Division/Branch Mail Stop Signature and Date Telephone Number E-mail
- 12. Authorization (Cannot be the same person listed in block 11.)
Name and Title - NRC Official Authorizing Release and, If Applicable, Authorizing Payment for Page Changes (listed in blocks 8 and 9 above).
Signature and Date NRC FORM 390 (03-2022)
Page 1 of 1 Presentation on "Part 53 Rulemaking Effort for Advanced Reactors" Ismael Garcia, Juris Jauntirans ANS/ASME Joint Committee on Nuclear Risk Management (JCNRM)
Risk-Informing Nuclear Cyber Security Virtual Workshop, July 13, 2022 Proceedings (CD-ROM)
American Nuclear Society, 555 North Kensington Avenue, La Grange Park, Illinois 60526 (800) 323-3044
10 0
Ismael Garcia NSIR/DPCP T-8B84 Ismael L. Garcia Digitally signed by Ismael L. Garcia Date: 2022.06.28 13:23:42 -04'00' (301) 415-2495 ismael.garcia@nrc.gov Jim Beardsley, [Acting] Deputy Director, NSIR/DPCP James D. Beardsley Digitally signed by James D. Beardsley Date: 2022.06.28 14:04:31 -04'00'
Part 53 Rulemaking Effort for Advanced Reactors Juris Jauntirans Ismael Garcia Division of Physical and Cyber Security Policy Office of Nuclear Security and Incident Response
Outline
- Part 53 - Brief History and Objectives
- Key Messages for Advanced Reactor Rulemaking
- A New Approach to Cyber Security
Brief History and Objectives NEIMA NEIMA requires the NRC to complete a rulemaking to establish a technology-inclusive, regulatory framework for optional use by commercial advanced nuclear reactor applicants for new reactor license applications by December 31, 2027.
OBJECTIVES Reasonable assurance of adequate protection of the public health and safety and common defense and security to at least the same degree of protection as required for current-generation LWRs Protect health and minimize danger to life or property to at least the same degree of protection as required for current-generation LWRs Provide greater operational flexibilities supported by enhanced margins of safety that may be provided in advanced nuclear reactor design Ensure that the requirements for licensing and regulating advanced nuclear reactors are clear and appropriate Identify, define, and resolve additional areas of concern related to the licensing and regulation of advanced nuclear reactors NEIMA: Nuclear Energy Innovation and Modernization Act LWRs: Light Water Reactors
Key Messages for Advanced Reactor Rulemaking
- The NRC is developing a new consequence-based, graded approach for cyber security to accommodate the potential for a wide range of advanced reactor technologies in the future.
- The proposed new approach leverages the operating experience.
- Power reactors cyber rule (10 CFR 73.54)
- The proposed cyber rule for fuel cycle facilities
- Lesson learned from IAEA and international counterparts CFR: Code of Federal Regulations IAEA: International Atomic Energy Agency
A New Approach Traditional Cyber Security Approach (10 CFR 73.54)
Protect from cyber attacks up to and including the DBT with a focus on digital assets associated with :
Safety, Security, and Emergency Preparedness functions; Support systems which, if compromised, could adversely impact safety, security, or emergency preparedness functions New Cyber Security Approach (10 CFR 73.110)
Focus on protecting via a graded approach, functions and associated digital assets against cyber attacks, up to and including the DBT, that are capable of causing consequences associated with:
Radiological Sabotage Physical Intrusion DBT: Design Basis Threat
Confidentiality Integrity Availability The cyber security program must provide reasonable assurance that digital computer and communication systems and networks are adequately protected against cyber attacks that are capable of causing the following consequences:
Adversely impacting the functions performed by digital assets that would prevent a postulated fission product release resulting in offsite doses exceeding the values in
§53.210 of this chapter.
Adversely impacting the functions performed by digital assets used by the licensee for implementing the physical security requirements in
§53.860(a) of this chapter.
Safety Security Emergency Preparedness Digital Assets Continuous monitoring and assessment Configuration management Vulnerability scans Cyber security event notifications Cyber Security Plan Designed in a manner that is commensurate with the potential consequences Ongoing assessment of security controls and effectiveness Defense in Depth New Cyber Security Approach - 10 CFR 73.110 Proposed Rule Text: https://adamswebsearch2.nrc.gov/webSearch2/main.jsp?AccessionNumber=ML22125A000
Draft Regulatory Guide Development 7
An acceptable approach for meeting the 10 CFR 73.110 requirements Effective guidance to support a performance-based regulatory framework Leverage IAEA and IEC security approaches IAEA: International Atomic Energy Agency IEC: International Electrotechnical Commission
Draft Regulatory Guide -
Three-Tier Analysis Approach 8
Facility Level Eliminate potential adversary scenarios through facility design Function Level Eliminate or mitigate attack vectors through passive CSP & DCSA elements System Level Utilize active CSP & DCSA elements to protect against cyber attacks CSP: Cyber Security Plan DCSA: Defensive Cyber Security Architecture
Milestones Continued work on Proposed Cyber Requirements and draft Regulatory Guide
- Finalize draft rule text: June 2022
- Finalize draft regulatory guidance: July 2022
- Inclusion in Part 53 rulemaking package to Commission: February 2023
Questions?