ML24129A043
| ML24129A043 | |
| Person / Time | |
|---|---|
| Issue date: | 05/08/2024 |
| From: | Siddiky T NRC/NSIR/DPCP/CSB |
| To: | |
| References | |
| ML24114A285 | |
| Download: ML24129A043 (1) | |
Text
No change impact on regions TRUE TRUE FALSE FALSE FALSE FALSE No inspection scope changes needed.
TRUE FALSE FALSE TRUE TRUE TRUE Inspection team has adequate time to complete scope.
FALSE TRUE TRUE TRUE TRUE TRUE Inspection scope efficiently uses FTE resources.
FALSE TRUE TRUE TRUE FALSE FALSE Inspection teams become more proficient.
TRUE TRUE TRUE MAYBE MAYBE MAYBE Emerging threats and vulverabilities (e.g. AI, Machine Learning, etc.) can be assessed in a timely mannner.
TRUE TRUE TRUE FALSE FALSE FALSE More frequent assessment of licensee cyber programs.
TRUE TRUE TRUE FALSE FALSE FALSE No inspection team workarounds needed.
FALSE TRUE TRUE TRUE TRUE TRUE Licensee's inspection support resources increase.
FALSE FALSE FALSE TRUE TRUE TRUE Adequate time for inspection team to disposition issues.
FALSE FALSE FALSE TRUE TRUE TRUE Corrective action review is timely.
TRUE TRUE TRUE FALSE FALSE FALSE Inspector preparation will be more effective.
FALSE FALSE FALSE TRUE TRUE TRUE No challenges to scheduling inspections.
TRUE TRUE FALSE TRUE TRUE TRUE No challenges to staffing inspections.
TRUE TRUE FALSE TRUE TRUE TRUE No challenges for licensee to provide corporate support.
FALSE FALSE FALSE TRUE TRUE TRUE Addresses licensee biennial inspection concerns.
FALSE FALSE FALSE TRUE TRUE TRUE No change in agency's budget.
TRUE TRUE FALSE FALSE FALSE FALSE Licensees' cyber program assessement quality and depth increases.
TRUE TRUE TRUE FALSE FALSE FALSE Inspection team capable of more thorough inspection (e.g. deep scrub).
FALSE TRUE FALSE TRUE TRUE TRUE Knowledge transfer and cyber training increases.
FALSE FALSE FALSE FALSE TRUE TRUE Promotes/facilitates open engagement between NRC inspectors and licensees TRUE TRUE TRUE TRUE TRUE TRUE Stakeholder engagement during the development of options TRUE TRUE TRUE TRUE TRUE TRUE Enhances the ability to implement a flexible approach to inspections FALSE TRUE TRUE TRUE TRUE TRUE Inspectors are well-positioned to engage licensees on cyber issues and speak authoritatively on cyber requirements FALSE TRUE TRUE TRUE TRUE TRUE Allows for consistent application of inspection program across all licensees and regions TRUE TRUE TRUE TRUE TRUE TRUE Provides depth/redundancy to ensure staff depatures/attrition do not cause adverse impact to program implementation TRUE TRUE TRUE TRUE TRUE TRUE Consistent inspection frequency with other disciplines within the NRC's purview (e.g., fire protection, CETI, FEI's)
FALSE FALSE FALSE TRUE TRUE TRUE Options for Future Cyber Security Inspection Frequencies Option colors depict, in relation to other options, lowest to highest preference:
Red (LOWEST), Orange, Yellow, Green, Blue, Violet (HIGHEST)
Option 1
[Biennial]
Maintain the Current Biennial Inspection, the Current Inspection Scope and the Current 4 Person Team Option 2
[Biennial-Scope Light]
Maintain the Current Biennial Inspection, Reduce the Inspection Scope and Maintain the Current 4 Person Team Direct Inspection Effort:
Option 3
[Annual]
Change to an Annual Inspection, Split the Scope in Half and Reduce to a 2 Person Team Option 4
[Triennial-Team Light]
Change to an Triennial Inspection, Maintain the Current Inspection Scope and Reduce to a 3 Person Team Direct Inspection Effort:
Option 5
[Triennial]
Change to an Triennial Inspection, Maintain the Current Inspection Scope and Maintain the Current 4 Person Team Option 6
[Quadrennial]
Change to an Quadrennial Inspection, Maintain the Current Inspection Scope and Maintain the Current 4 Person Team
Overall Score 90 99 88 115 111 109 No change impact on regions 5
5 1
4 4
3 No inspection scope changes needed.
5 3
4 5
5 5
Inspection team has adequate time to complete scope.
2 5
4 5
5 5
Inspection scope efficiently uses FTE resources.
3 5
4 4
2 2
Inspection teams become more proficient.
4 4
5 3
3 3
Emerging threats and vulverabilities (e.g. AI, Machine Learning, etc.) can be assessed in a timely mannner.
4 4
5 2
2 1
More frequent assessment of licensee cyber programs.
4 4
5 3
3 2
No inspection team workarounds needed.
1 2
4 5
5 5
Licensee's inspection support resources increase.
2 2
1 4
4 5
Adequate time for inspection team to disposition issues.
2 2
2 5
5 5
Corrective action review is timely.
4 4
5 3
3 1
Inspector preparation will be more effective.
2 3
4 5
5 5
No challenges to scheduling inspections.
4 4
1 5
4 5
No challenges to staffing inspections.
4 4
2 5
5 5
No challenges for licensee to provide corporate support.
2 2
1 4
4 4
Addresses licensee biennial inspection concerns.
2 2
1 5
5 5
No change in agency's budget.
5 5
4 4
1 3
Licensees' cyber program assessement quality and depth increases.
4 4
5 3
3 2
Inspection team capable of more thorough inspection (e.g. deep scrub).
3 5
3 5
5 5
Knowledge transfer and cyber training increases.
2 2
1 3
5 5
Promotes/facilitates open engagement between NRC inspectors and licensees 3
3 3
4 4
4 Stakeholder engagement during the development of options 5
5 5
5 5
5 Enhances the ability to implement a flexible approach to inspections 3
5 4
5 5
5 Inspectors are well-positioned to engage licensees on cyber issues and speak authoritatively on cyber requirements 4
4 5
4 4
4 Allows for consistent application of inspection program across all licensees and regions 5
5 5
5 5
5 Provides depth/redundancy to ensure staff depatures/attrition do not cause adverse impact to program implementation 4
4 3
5 5
5 Consistent inspection frequency with other disciplines within the NRC's purview (e.g., fire protection, CETI, FEI's) 2 2
1 5
5 5
Options for Future Cyber Security Inspection Frequencies Cells are graded from 1-5, measuring how well the option achieves the overall objective for each criterion.
(5 = Strongly Agree thru 1 = Strongly Disagree)
Option colors depict, in relation to other options, lowest to highest preference:
Option 1
[Biennial]
Maintain the Current Biennial Inspection, the Current Inspection Scope and the Current 4 Person Team Option 2
[Biennial-Scope Light]
Maintain the Current Biennial Inspection, Reduce the Inspection Scope and Maintain the Current 4 Person Team Di t I ti Eff t
Option 3
[Annual]
Change to an Annual Inspection, Split the Scope in Half and Reduce to a 2 Person Team Option 4
[Triennial-Team Light]
Change to an Triennial Inspection, Maintain the Current Inspection Scope and Reduce to a 3 Person Team Di t I ti Eff t
Option 5
[Triennial]
Change to an Triennial Inspection, Maintain the Current Inspection Scope and Maintain the Current 4 Person Team Option 6
[Quadrennial]
Change to an Quadrennial Inspection, Maintain the Current Inspection Scope and Maintain the Current 4 Person Team