A Conceptual Framework for Securing Digital I&C Systems in Nuclear Power Plants

Digital technologies have been applied recently to the I&C systems of nuclear power plants. Due to this application of digital technologies, cyber security concerns are increasing in the nuclear industry. In this paper, the characteristics of I&C systems are described in terms of their differences from industrial control systems, and related nuclear regulatory requirements and other guides are introduced. Key features for cyber security including a defensive architecture, possible threats, and vulnerabilities are analyzed. Based on this analysis and an analysis of technical controls presented in the regulatory guide 5.71, a conceptual framework of technical security controls for the I&C systems is proposed, and how to achieve it is discussed.