Computer Security of Instrumentation and Control Systems at Nuclear Facilities

Computer security as a discipline is challenged by increasing threat vectors targeting a dynamic technological environment. This publication establishes guidance addressing the challenge of applying computer security measures to instrumentation and control (IandC) systems at nuclear facilities. The measures are intended to protect these IandC systems throughout their entire life cycles against malicious acts perpetrated by threat actors. The technical basis and methodologies for the application of these computer security measures are considered. The publication also addresses the application of such measures to the development, simulation and maintenance environments of these IandC systems. In addition, account is taken of developments in human factors engineering and nuclear safety. This Technical Guidance references and takes into account other Safety Guides and IAEA Nuclear Security Series publications that provide guidance relating to IandC design.