Development of a new IEC Standard on cybersecurity controls for I and C in Nuclear Power Plants - IEC 63096 - 158
- Siemens AG, PG ES IC T2000SOL PN QC, Freyeslebenstr. 1, D-91058 Erlangen (Germany)
- IEC SC45A WGA9, Convenor Technology Resources, 23292 Pompeii Drive Dana Point, CA 92629 (United States)
- Friedrich-Alexander-University Erlangen-Nuremberg/AREVA GmbH, Henri-Dunant-Str., 3 91058 Erlangen (Germany)
Standards are promoting the enhancement of cybersecurity in Nuclear Power Plants (NPP). Standardizing processes and procedures are also crucial to achieve successful international collaboration. Many information security standards were developed in recent years; however, not many of them could be directly applied to NPPs. This paper provides an overview of the development of a new cybersecurity standard dealing with cybersecurity controls for nuclear power plants around the world. For I and C systems in NPPs, the new IEC 63096 standard targeted for issue in 2019, focuses specifically on the selection and application of cybersecurity controls from the included security controls catalogue. The role of selected and applied cybersecurity controls is to prevent, detect and react to digital attacks against computer-based I and C systems. This standard applies to the I and C of new nuclear power plants and to the I and C modernization in existing plants. It is being prepared and based on IEC 62645 , ISO/IEC 27000 series , IAEA , and country specific guidance in this expanding the technical and the security focus area. The Standard is intended to be used by designers and operators of NPPs (utilities), systems evaluators, vendors and subcontractors, and by licensors. While the development of international standards is essential it is also a lengthy process, taking multiple years. Especially with regard to cybersecurity, all involved stakeholders have to collaborate. (authors)
- Research Organization:
- American Nuclear Society - ANS, 555 North Kensington Avenue, La Grange Park, IL 60526 (United States)
- OSTI ID:
- 23035292
- Country of Publication:
- United States
- Language:
- English
Similar Records
IEC 62859: A new international standard on the coordination between safety and cybersecurity for nuclear I and C systems - 160
A Cybersecurity Event Simulation Tool and Platform