DOE OSTI · 1832309
Safety and Security Defense-in-Depth for Nuclear Power Plants
Abstract
This report describes the risk-informed technical elements that will contribute to a defense-in-depth assessment for cybersecurity. Risk-informed cybersecurity must leverage the technical elements of a risk-informed approach appropriately in order to evaluate cybersecurity risk insights. HAZCADS and HAZOP+ are suitable methodologies to model the connection between digital harm and process hazards. Risk assessment modeling needs to be expanded beyond HAZCADS and HAZOP+ to consider the sequence of events that lead to plant consequences. Leveraging current practices in PRA can lead to categorization of digital assets and prioritizing digital assets commensurate with the risk. Ultimately, the culmination of cyber hazard methodologies, event sequence modeling, and digital asset categorization will facilitate a defense-in-depth assessment of cybersecurity.
Explore related subjects
Keep this discovery
Explore connections, maps & timelines
Clark, Andrew J., Rowland, Michael T.. 2021-09-01. Safety and Security Defense-in-Depth for Nuclear Power Plants. https://doi.org/10.2172/1832309
Cite the original work for its findings. Save a collection to share your selection of sources.