Search NASA⌕ Search

SEARCH · Search NASA

Results for “Advanced reactor regulatory framework”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

Regulatory Treatment of Low Frequency External Events under a Risk-Informed Performance-Based Licensing Pathway

Significant efforts are underway to develop and implement a risk-informed performance-based licensing framework for advanced reactors built on the establishment of an affirmative safety case. Such approaches offer the benefits of increased flexibility regarding key design and licensing decisions based on a detailed assessment and understanding of plant risk. These methods include the comprehensive analysis of scenarios that have historically been addressed through conservative and deterministic licensing analysis approaches, such as the evaluation of event sequences at frequencies of occurrence beyond the design basis. While the detailed analysis of low frequency events provides insights that can help justify alternative treatments to past conservatism, the findings are dependent on the quality and confidence associated with the analyses. The assessment of external hazards presents a unique challenge, as their potential frequency of occurrence, especially of large magnitude events, is inherently uncertain given the long return periods in question. The current project seeks to further explore the regulatory treatment of low frequency external events as part of a risk-informed performance-based framework. The goals are to identify the benefits and challenges of such approaches for advanced reactor vendors and to aid in the development of consistent and appropriate methodologies. As part of this effort, the current report summarizes initial project findings, with a focus on the evaluation of the seismic hazard. This includes an exploration of the implementation of a risk-informed performance-based approach through an example analysis. Based on the identified challenges associated with the probabilistic treatment of low frequency event sequences, additional performance-based methods were explored as complementary tools for demonstrating regulatory compliance. The report highlights key challenges and opportunities associated with the methods and outlines recommendations and future activities to assist with their implementation.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Safety Considerations for Advanced Material Irradiation at the Advanced Test Reactor

The Advanced Test Reactor (ATR) is a light water reactor with aluminum-clad driver fuel. A primary mission of the ATR is to support the next generation of nuclear reactors. This support necessarily requires irradiation of advanced materials such as sodium, fuel salts, and metal eutectics. Irradiation of advanced materials in the ATR environment presents a challenge when completing accident analyses and demonstrating compliance to the Safety Analysis Report (SAR). Many advanced materials have the possibility to react with the ATR protective barriers such as the cladding or primary coolant system (PCS) boundary during postulated accident scenarios. Further, molten fuel experiments fall outside of the standard regulatory framework for dose consequence analyses. ATR is currently developing new safety analysis methods to support irradiation of advanced materials. The primary considerations for this development are 1) experiment containment design requirements, 2) primary coolant system response to an experiment containment failure, and 3) dose analyses for molten fuels.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Safety Considerations for Advanced Material Irradiation at the ATR

The Advanced Test Reactor (ATR) is a light water reactor with aluminum-clad driver fuel. A primary mission of the ATR is to support the next generation of nuclear reactors. This support necessarily requires irradiation of advanced materials such as sodium, fuel salts, and metal eutectics. Irradiation of advanced materials in the ATR environment presents a challenge when completing accident analyses and demonstrating compliance to the Safety Analysis Report (SAR). Many advanced materials have the possibility to react with the ATR protective barriers such as the cladding or primary coolant system (PCS) boundary during postulated accident scenarios. Further, molten fuel experiments fall outside of the standard regulatory framework for dose consequence analyses. ATR is currently developing new safety analysis methods to support irradiation of advanced materials. The primary considerations for this development are 1) experiment containment design requirements, 2) primary coolant system response to an experiment containment failure, and 3) dose analyses for molten fuels.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Design of Defensive Cybersecurity Architectures for High Temperature, Gas-Cooled Reactors

This report presents the design of defensive cybersecurity architectures (DCSAs) for High Temperature, Gas-Cooled Reactors (HTGRs). A DCSA is a cybersecurity design feature that places systems into security zones in a graded approach according to the importance of the functions performed by the systems. DCSA design efforts for advanced reactors may commence as early as the system-level design phase. This design approach is consistent with the draft regulatory guide for advanced reactor cybersecurity programs (DG-5075) and enables advanced reactor designers to consider the effects of security-by-design (SeBD) features on their DCSAs. Integration of DCSA design and other cybersecurity activities with the traditional design process as part of a SeBD framework may enable advanced reactor designers to improve the security posture of their plants while reducing implementation and operating costs. This report provides a DCSA template for an exemplar HTGR and describes a DCSA design process using event tree analysis so that the template may be optimized for a given HTGR design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Design of Defensive Cybersecurity Architectures for Sodium-Cooled Fast Reactors

This report presents the design of defensive cybersecurity architectures (DCSAs) for Sodium-Cooled Fast Reactors (SFRs). A DCSA is a cybersecurity design feature that places systems into security zones in a graded approach according to the importance of the functions performed by the systems. DCSA design efforts for advanced reactors may commence as early as the system-level design phase. This design approach is consistent with the draft regulatory guide for advanced reactor cybersecurity programs (DG-5075) and enables advanced reactor designers to consider the effects of security-by design (SeBD) features on their DCSAs. Integration of DCSA design and other cybersecurity activities with the traditional design process as part of a SeBD framework may enable advanced reactor designers to improve the security posture of their plants while reducing implementation and operating costs. This report provides a DCSA template for an exemplar SFR and how the template may be optimized for a given SFR design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Feasibility and strategic implications of deploying nuclear power reactors in Africa

This report assesses the feasibility and strategic implications of deploying nuclear power reactors, including large-scale plants, advanced small modular reactors (SMRs), and microreactors, in African countries. Case studies focus on South Africa, Egypt, Kenya, Ghana, and Nigeria, examining nuclear energy’s role in Africa’s rapidly evolving energy landscape, marked by fast-growing demand, significant electricity access gaps, increasing renewable penetration, and strong policy commitments to industrialization and energy security. Several U.S. reactor technologies and designs are considered based on their development status and readiness for deployment. The analysis finds that nuclear power can provide reliable, clean baseload and flexible generation, as well as high-temperature process heat for desalination, hydrogen production, and industrial applications. However, suitability is highly country-specific, depending on grid size and stability, transmission capacity, cooling water availability, regulatory readiness, and fuel supply chains. Near-term deployment opportunities are strongest for light-water reactors (such as NuScale, BWRX-300, AP300, and SMR-300) that use low-enriched uranium and build on proven technology. More advanced concepts, including gas-cooled, sodium-cooled, molten-salt cooled reactors, and microreactors, will likely be relevant for African deployment in the 2030s or later, contingent on demonstration projects, high-assay low-enriched uranium (HALEU) fuel availability, and mature international licensing frameworks. Economic analysis shows that SMRs are capital-intensive, with projected overnight costs for 300 MWe units in 2025 ranging from approximately 1.4 to 2.6 billion USD per module. The levelized cost of electricity (LCOE) is highly sensitive to the weighted average cost of capital (WACC). Given typically higher financing costs and utility balance-sheet weaknesses in many African countries, bankable project structures will require sovereign guarantees, robust offtake arrangements, and layered financing from export credit agencies, development finance institutions, and vendor nations. Comparisons with recent large nuclear projects in the United Arab Emirates (UAE) and Egypt underscore the central role of state-backed loans, long tenors, and concessional terms. Country case studies illustrate a spectrum of readiness and opportunity. South Africa operates two 920 MWe pressurized light water reactors (totaling 1,840 MWe) at Koeberg and has the most mature regulatory and industrial base, positioning it as a prime candidate for both large reactors and SMRs to replace coal, support desalination, and anchor industrial hubs. Egypt is constructing four VVER-1200 units at El Dabaa with strong state leadership and could later complement this fleet with SMRs for coastal and industrial applications. Kenya and Ghana are advancing through IAEA Milestones with growing institutional capacity and clear interest in SMRs that match their smaller grids and industrialization plans. Nigeria has the largest demand potential but faces acute constraints in grid reliability, project bankability, and regulatory capacity; targeted deployments of large reactors and SMRs near coastal or industrial sites could have high impact if accompanied by major grid upgrades and institutional reforms. The report identifies cross-cutting challenges such as financing, political continuity, public acceptance, nonproliferation and security, waste and back-end management, regulatory capacity, grid adequacy, and long deployment timelines for first-of-a-kind designs, and ANL/NSE-26/3 ii proposes broad directions for resolution. These include stronger multifaceted financing for nuclear, long-term national energy strategies that transcend electoral cycles, proactive stakeholder engagement, strengthened regional and national regulators, and systematic workforce development through centers of excellence and expanded training. The United States should develop partnerships with African countries and offer end-to-end nuclear package similar to those used effectively by competitors: coordinated project development, state-backed financing, long-term fuel services, and durable in-country support through regional offices and sustained workforce/regulatory training. With timely planning, sustained political commitment, and appropriate financing and institutional support, nuclear energy, both large reactors and advanced SMRs, can become a meaningful, though not dominant, pillar of Africa’s future power mix, enhancing energy security, enabling industrial growth, and supporting climate goals.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Coupling TRACE with nodal neutronics code Ants using the Exterior Communications Interface and VTT's multi-physics driver Cerberus

In this paper a recently developed coupling between system code TRACE and nodal neutronics code Ants is presented. The TRAC/RELAP Advanced Computational Engine (TRACE) is a reactor system code developed by U.S. Nuclear Regulatory Commission (NRC). The code has been designed to analyse loss-of-coolant accidents (LOCAs), operational transients and other accident scenarios in light water reactors. Ants is the reduced order nodal neutronics code of the Kraken framework. The diffusion solution method in Ants is based on the Analytic Function Expansion Nodal method (AFEN) and Flux Expansion Nodal Method (FENM). Rectangular, hexagonal and triangular geometries are supported. Both steady state and burnup problems including micro-depletion can be simulated. The coupling is implemented using VTT's multi-physics driver Cerberus and the Exterior Communications Interface (ECI) which is supplied with TRACE and enables the coupling of TRACE without source code modifications. The main focus in the paper is on describing the TRACE-Ants coupling in detail in order to share to other code developers what we have learned from the ECI based coupling process. The coupled code system is briefly tested by simulating a simple transient in a SMR core initiated by control rod movement. The results of the test calculation look reasonable and more complicated test cases will be modelled in the near future.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Regulatory Considerations for Domestic Reprocessing Facility Physical Security

U.S. advanced non-light-water reactor vendors may pursue collocated on-site reprocessing activities. Therefore, these facilities are likely to possess formula quantities, or Category I quantities, of special nuclear material (SNM) during normal operations. The U.S. Nuclear Regulatory Commission (U.S. NRC) has yet to formally establish a regulatory framework for commercial reprocessing. While Category I requirements would explicitly not apply in this circumstance under current regulatory requirements, regulatory certainty does not exist. A novel framework should be developed to ensure public health and safety while also risk-informing the physical security requirements. This report reviews the relevant background of related rulemaking activities and proposes risk-informed physical protection requirements to satisfy these objectives. Insights from NRC security-related rulemaking activities provide a substantial technical basis to approach potential establishment of physical security requirements for reprocessing facilities. If a licensee can provide justification that the material satisfies a sufficient self-protecting radiation dose threshold, the material may not be subject to theft or diversion requirements and only potential sabotage requirements would apply. Furthermore, if the material can be justified to be moderately dilute, a set of risk-informed requirements could provide adequate protection of public health and safety. A revised performance objective for prevention of theft of moderately dilute Category I SNM may be detection to allow prompt recovery by a local law enforcement agency. However, a significant caveat to the proposed categorization scheme is the unknown integration of radiological sabotage with requirements for the protection against theft. Future licensees should consult with the NRC regarding treatment of this regulatory topic. Additionally, the self-protecting radiation dose threshold (either the existing or a proposed future threshold) would need to be considered. An integrated approach may apply graded potential requirements for protection against the design basis threat of radiological sabotage currently applicable to commercial nuclear power plants and Category I SNM facilities defined within 10 CFR 73.1(a).

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

U.S. Domestic Security-by-Design: On Site Response Force Strategies

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping cost reasonable to make nuclear energy competitive. The past approach has often included implementing security features after a facility has been designed and without attention to optimization, which can lead to cost overruns. Incorporating security in the design process can provide robust, cost- effective, and sufficient physical protection systems. The purpose of this work is both to develop a framework for the integration of security into the design phase of High Temperature Gas Reactors (HTGRs) that utilize pebble-based fuels and microreactors. Specifically, this effort focuses on integrating security into the design phase of a model HTGR and microreactor that meets current Nuclear Regulatory Commission (NRC) physical protection requirements and providing advanced solutions to improve physical protection and decrease costs. A suite of tools, including SCRIBE3D©, PATHTRACE© and Blender© were used to model a hypothetical, generic domestic HTGR facility and microreactor facility. Physical protection elements such as sensors, cameras, barriers, and onsite response forces were added to the model based on best practices for physical protection systems. Multiple outsider sabotage scenarios were examined with four-to-eight adversaries to determine security metrics. The results of this work will influence physical protection system designs and facility designs for U.S. domestic HTGRs and microreactors. This work will also demonstrate how a series of experimental and modeling capabilities across the Department of Energy (DOE) Complex can lead to efficient security systems that utilize an onsite response force. The conclusions and recommendations in this document may be applicable to all SMR designs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Transformational Challenge Reactor Safety Design and Radionuclide Retention Strategy

An integrated safety design and radionuclide (RN) retention strategy is developed to support the Transformational Challenge Reactor (TCR) demonstration. This demonstration aims to showcase viability for rapid deployment of a novel reactor by leveraging the advances in materials, manufacturing, and computational sciences through a highly integrated and agile design and development approach. This strategy provides a logical description and understanding of how RNs are contained within the facility. Rather than discussing fission product barriers individually between separate design and safety basis reports, this paper provides a consistent description and narrative to better facilitate regulatory interactions and focus safety design efforts. The principal barriers credited include the various coating layers in the tristructural isotropic (TRISO) fuel particle, the silicon carbide (SiC) matrix hosting the particles within the fuel element, the helium pressure boundary, and the confinement system. The choice and assumed performance of the credited barriers are highly conservative, which is a direct reflection of the low hazard that the TCR demonstration presents and the need to simplify and focus the safety review process accordingly. However, the strategy and the associated framework are generalized and may be adopted and tailored to support other advanced reactor demonstration efforts.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Sensitivity Analysis of Irradiated Fueled Experiments using the MOOSE Framework [Slides]

Modeling and simulation (M&S) methods are able to predict uncertainties in experimental parameters (e.g., power and fission density) during irradiation. A shortfall exists in predicting how sensitive some of the parameters will behave during the experimental process. Sensitivity and Uncertainty Quantification (SUQ) is critical in support of qualification and licensing reactor fuels. The application of a method to quantify the uncertainty in these experiments is critical to the prediction of their performance. In this work, we propose the use of a polynomial chaos expansion (PCE) method to quantify the sensitive parameters in these simulations and, in an extension, their experimental surrogates. We propose to perform M&S using PCE uncertainty quantification on a previously irradiated fueled experiment in order to provide a validation case for Griffin and expand its use as a verification and validation (V&V) tool for experiments with a neutronics component. Griffin is an advanced, deterministic neutronics analysis code built using the MOOSE (multiphysics object-oriented simulation environment) framework which can provide state-of-the-art neutronic analysis on M&S of experiments. We will use the stochastic tools module (STM) in MOOSE to provide PCE uncertainty quantification on the proposed experimental setup. Idaho National Laboratory (INL) does not yet have an in-house developed code with V&V approval for experiments performed on-site; this work would provide a necessary addition of support for experiments performed at INL. The Nuclear Regulatory Commission (NRC) has explicitly requested uncertainties in calculated values such as fuel power and burnup, and the development of this capability would benefit the relationship between INL and the NRC.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

U.S. Domestic Pebble Bed Reactor: Security-by-Design

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping cost reasonable to make nuclear energy competitive. The past approach has often included implementing security features after a facility has been designed and without attention to optimization, which can lead to cost overruns. Incorporating security in the design process can provide robust, cost effective, and sufficient physical protection systems. The purpose of this work is both to develop a framework for the integration of security into the design phase of High Temperature Gas Reactors (HTGRs) that utilize pebble-based fuels and increase the use of modeling and simulation tools to optimize the design of physical protection systems. Specifically, this effort focuses on integrating security into the design phase of a model HTGR that meets current Nuclear Regulatory Commission (NRC) physical protection requirements and providing advanced solutions to improve physical protection and decrease costs. A suite of tools, including SCRIBE3D©, PATHTRACE© and Blender© were used to model a hypothetical, generic domestic HTGR facility. Physical protection elements such as sensors, cameras, barriers, and guard forces were added to the model based on best practices for physical protection systems. Multiple outsider sabotage scenarios were examined with four-to eight adversaries to determine security metrics. The results of this work will influence physical protection system designs and facility designs for U.S. domestic HTGRs. This work will also demonstrate how a series of experimental and modeling capabilities across the Department of Energy (DOE) Complex can impact the design of and complete Safeguards and Security by Design (SSBD) for SMRs. The conclusions and recommendations in this document may be applicable to all SMR designs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Evaluation of AI-enabled Digital Documented Safety Analysis

The National Reactor Innovation Center (NRIC) is leading a transformative initiative to accelerate advanced reactor deployment by fundamentally reimagining how nuclear safety basis documentation is developed, reviewed, and maintained. Traditional Documented Safety Analysis (DSA) processes for DOE-authorized facilities rely on static, document-centric workflows that consume significant time and resources, exemplified by recent major licensing efforts requiring hundreds of thousands of staff hours and millions of pages of documentation review. These conventional approaches create barriers to the rapid, cost-effective deployment of advanced reactors that America's future energy needs demand. NRIC's DOE Authorization Digital Transformation Project addresses these challenges through an innovative framework that integrates artificial intelligence (AI), digital engineering, and systems-based data management into a cohesive digital ecosystem. This white paper presents NRIC's methodology for evaluating AI-enabled document generation capabilities within this broader digital infrastructure, using the Demonstration of Microreactor Experiments (DOME) facility as a pilot case study. The evaluation will assess an AI tool's ability to generate a Preliminary Documented Safety Analysis (PDSA) through progressive integration stages—from standalone document processing to full digital thread connectivity—while maintaining rigorous verification, validation, and regulatory acceptance standards. By establishing dynamic, traceable connections between design data and safety documentation, NRIC's approach has the potential to reduce both document development time and regulatory review cycles by as much as 50%, while simultaneously improving accuracy, consistency, and traceability. This initiative represents a critical step toward establishing reusable digital infrastructure that reactor developers can leverage to accelerate their path from concept to commercial operation, directly supporting NRIC's mission to demonstrate and deploy advanced nuclear energy technologies.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

An approach to combine neutron and ion irradiation data to accelerate material qualification for nuclear reactors

Next-generation nuclear power plants are generally characterized by higher operating temperatures, increased neutron fluences and energies, and distinct corrosive coolant environments versus the existing light water reactor fleet. Whether using existing materials in new environments, newly developed materials tailored for these environments, or new manufacturing methods, the traditional decades-long approach for materials qualification does not facilitate rapid deployment. Ion irradiation has demonstrated success in reproducing material microstructure and select property evolution resulting from neutron irradiation with three to four orders of magnitude reduction in time and cost, making it an ideal candidate for accelerated irradiation testing. Because microstructure has a large impact on bulk material properties, limited neutron irradiation data at lower damage levels can in principle be combined with accelerated ion testing results and modeling and simulation to form an accurate prediction of microstructure evolution and select properties under different neutron irradiation conditions and at higher damage levels. The objective of this work is to present a conceptual framework of specific steps to fulfill several technical challenges associated with qualifying materials for performance in radiation environments on an accelerated time frame. A brief review of the regulatory landscape for materials in nuclear environments is presented, followed by additional overviews to understand the current state of the art for correlation of materials properties across radiation environments using experimental and computational methodologies. Finally, the roles of academia, national laboratories, and industry in the advancement of this accelerated materials qualification framework are discussed as a path forward, with possible case studies presented.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Sensitivity analysis, surrogate modeling, and optimization of pebble-bed reactors considering normal and accident conditions

This research provides a valuable tool that streamlines the optimization process while significantly increasing its accuracy. This study creates a robust framework for reactor design optimization by incorporating comprehensive modeling using the Comprehensive Reactor Analysis Bundle, or BlueCRAB, within the Multiphysics Object-Oriented Simulation Environment (MOOSE). BlueCRAB is the United States Nuclear Regulatory Commission's code suite for non-light water reactor analysis and includes the Griffin, Pronghorn, and Bison applications. This not only improves the efficiency of the optimization process but also enhances the reliability of the results. Such a tool is essential for advancing the state-of-the-art in pebble-bed reactor technology and is critical for achieving the goals of Generation IV reactors, which aim for safe, sustainable, and economically viable nuclear energy solutions. This work presents and applies this workflow on pebble-bed reactors while considering both normal and off-normal conditions. A representative gas-cooled pebble-bed reactor at equilibrium core conditions serves as the nominal design specification for normal operation and is based on previous research. The depressurized loss-of-forced-cooling accident is deployed for off-normal conditions in this work. After defining design-related parameters and quantities of interest regarding reactor safety and performance, this multiphysics model is sampled using the MOOSE stochastic tools module. The result is a comprehensive dataset of configurations, enabling sensitivity analysis and the generation of surrogate models. Subsequently, the dataset and surrogate models are employed in two optimization studies aimed at maximizing fuel utilization and economic profit while adhering to safety and operational constraints. Performing the optimization process with fuel utilization as the metric leads to an improvement of approximately 10%, compared to engineering-judgment-based nominal conditions. The optimization on economic profit leads to an estimated increase of ~300 million USD over the lifetime of the reactor.

97 MATHEMATICS AND COMPUTING↗

Predictive Modeling and Uncertainty Quantification in Condition Monitoring of Active Components: A Reactor Coolant Pump Use Case

This work develops data-driven models for onset of thermal barrier leakage in reactor coolant pumps. It incorporates uncertainty quantification to enhance the reliability and robustness of pre- dictions. Using synthetic data generated by the Generic Pressurized Water Reactor simulator, realistic degradation scenarios were simulated across lifecycle stages—beginning, middle, and end of life. Key variables, including differential pressure, flow rate, vibration, and temperatures, were analyzed using machine learning framework. The fully connected neural network models demonstrated exceptional performance, achieving R2 scores exceeding 0.99 and root mean square errors as low as around 8.23 × 10-2 gallon per minute (gpm) for the three stages of the lifecy- cle. UQ analysis further validated the model’s robustness, with narrow uncertainty bounds during steady-state operations and appropriately wider bounds during transitional phases, reflecting the physical behavior of the system. This work addresses important gaps in real-time condition moni- toring and regulatory compliance by integrating advanced condition monitoring technologies with UQ into IST programs. The ability to detect thermal barrier leakage early and quantify prediction reliability supports optimizing maintenance strategies while ensuring nuclear power plants’ safe and reliable operation.

99 - GENERAL AND MISCELLANEOUS↗

Development of a CRAB-MELCOR Framework for Utilization in Support of Estimating a Realistic Mechanistic Source Term for Microreactors

Research and development activities are being performed to link important advanced non-light-water microreactor technology research and development activities sponsored by the U.S. Department of Energy’s Office of Nuclear Energy with regulatory requirements and critical licensing needs likely to impact the deployment of a domestic commercial microreactor fleet. This report presents the progress of ongoing work to perform a gap analysis of the coupling of the Nuclear Regulatory Commission’s Comprehensive Reactor Analysis Bundle code suite and MELCOR code. This key Fiscal Year 2023 research reflects microreactor regulatory needs and challenges noted by industry, Department of Energy, and Nuclear Regulatory Commission stakeholders.

99 GENERAL AND MISCELLANEOUS↗

Proposed Classifications of Remote Operations for Nuclear Reactors Based on Physical and Cybersecurity Considerations

The incorporation of remote operations into reactor operations is a topic of high interest among advanced and small modular reactor (A/SMR) vendors, with some considering it essential to the success of their business models. However, remote operations are a concept novel to the nuclear industry. While various technical aspects of remote operations have been explored, a significant gap remains in understanding the security implications of integrating remote operations into reactor designs, particularly concerning the security requirements for remote-operations facilities and infrastructure. This report aims to address this gap by first defining classes of remote operation based on the extent of remote access to reactor control systems and grounded in the existing regulatory framework with compatible terminology. Secondly, the report outlines the physical and cybersecurity requirements applicable to remote-operations facilities and infrastructure at each defined class. These requirements are based on existing licensing frameworks provided by 10 Code of Federal Regulations (CFR) Part 50 and 10 CFR Part 52, as well as the upcoming A/SMR licensing framework in the proposed Part 53. The assessment focuses specifically on security regulations, such as 10 CFR Part 73, which includes provisions for both cybersecurity (§ 73.54) and physical security (§ 73.55). This report proposes five classes of remote reactor operations. Class 1 involves remote monitoring only, with no control over reactor systems. Class 2 allows for the remote issuance of allowlisted commands to the reactor facility. Class 3 extends control to non-safety-significant, non-safety-related, or not important to safety systems and equipment. Class 4 permits remote control of safety-significant systems. Finally, Class 5 allows remote control of safety-related systems. It is important to note that these classes were defined purely with functionality in mind, without considering the practicality or feasibility of implementation for each class under current or upcoming regulatory guidance. The intention behind this approach is to enable an assessment of which security requirements apply to each class, allowing readers to evaluate the implementation possibilities for their specific use cases. Following the definition of remote-operation classes, the report assesses the specific physical and cybersecurity requirements applicable to the remote-operations facility and infrastructure within each defined class. This includes defining the types and locations of operators that are possible at each class of operation and, based on operator type and location, as well as functionality within each class, outlining the physical and cybersecurity requirements. By detailing the security requirements by class, the report provides readers with the information needed to determine the type of security program they may need to implement for their desired concept of operation. The next contribution of this report was to assess the practicality of implementing each proposed class of remote operations based upon the security requirement assessment. In short, three of the five proposed remote-operation classes were found to possibly have a practical path forward to implementation under the U.S. regulatory framework. Class 1 remote operations are currently in use in the U.S. while Class 2 and 3 remote operations may be logistically possible to implement under the U.S. regulatory framework. The final two Classes, 4 and 5, would likely be logistically difficult, if not infeasible to implement within the current U.S. physical- and cybersecurity regulatory framework. Given the results of the feasibility assessment, an example architecture is proposed for both Class 2, remote allowlisted commands, and Class 3, remote control of non-safety systems as well as security implication assessments of each architecture. These example implementations are not meant to be prescriptive in terms of how Class 2 or Class 3 remote operations should be deployed; instead, they are intended to be informative to stakeholders on how Class 2 or Class 3 could potentially be applied in order to inform their system design. An example architecture for Class 1 remote monitoring was not provided as Class 1 in already in use in U.S. nuclear operations. Example architectures for Class 4 and Class 5 were not provided due to their assessment of being likely infeasible to implement. The final contribution is an assessment of the physical- and cybersecurity implications of introducing autonomous operations into an A/SMR. What was found was that the security implications can be separated into two cases. Autonomous operations supported by SSCs located only at the reactor site, and autonomous operations supported by SSCs outside of the reactor site. For the first case, the introduction of autonomous systems will likely not change the facility’s requirement to comply with existing cyber and physical security regulation

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗