Information Notice 2019-04, Effective Cyber Security Practices to Protect Digital Assets of Byproduct Materials Licensees

Effective Cyber Security Practices to Protect Digital Assets of Byproduct Materials Licensees

ML18044A350
Person / Time
Issue date:	08/14/2019
From:	Andrea Kock, Chris Miller Office of Nuclear Material Safety and Safeguards, Office of Nuclear Reactor Regulation
To:
Lukes K
References
IN-19-004
Download: ML18044A350 (9)

Code of Federal Regulations

Define Roles and Responsibilities

Implement Staff Cyber Security Training Physical Security Code of Federal Regulations

Maintain an Accurate Inventory of Digital Assets and Eliminate Exposure to External

Networks

Implement Local Networks or Network Segmentation and Apply Firewalls

Use Secure Remote Access Methods

Implement Measures for Network Port Access

Use Strong Passwords, Change Default Passwords, and Consider Other Access Controls

Maintain Awareness of Vulnerabilities and Implement Necessary Patches and Updates

Develop and Enforce Policies on Mobile Devices

Develop and Enforce Policies on Electronic Media and Device Handling

Implement Measures for Detecting Compromises and Develop a Cyber Security Incident

Response Plan

Develop and Enforce Policies on Maintenance and Testing