Securing Portable Media in Nuclear Facilities

NRC 10 CFR section 73.54 “Physical Protection of Plants and Materials, Protection of Digital Computer and Communication Systems and Networks” requires nuclear plants to have cybersecurity programs in place, including measures for isolating critical digital assets (airgaps or other robust isolation methods), controlling and securing the use of portable media, and continuous monitoring though both active and passive malware analysis. Threats to nuclear facilities have grown more sophisticated over time.