Skip to main content

Nuclear Cyber Security and Its Discontents

By

The minority (that is, the Republicans) on the Senate Homeland Security and Governmental Affairs committee released a report that shows a number of federal agencies, including the Nuclear Regulatory Commission, exercising lax cyber security. In some instances, the brew is rather weak – antivirus software has not been updated at some agencies, which probably has Symantec worried - but there’s some substantial stuff in it, too.

This sums up the report’s finding on the NRC:

Yet just about every aspect of that process [addressing cyber security weaknesses] appears to be broken at the NRC. Problems were identified but never scheduled to be fixed; fixes were scheduled but not completed; fixes were recorded as complete when they were not.

The first thing to note is that this has nothing whatever to do with cyber security at nuclear energy facilities. In some ways, this report confuses network security with what is a much broader topic. Government agency network security has been low hanging fruit when one seeks an issue to publicize, which doesn’t mean it shouldn’t be addressed.

Bill Gross, NEI senior project manager, engineering, who has done a lot of work on nuclear facility cyber security, wrote a blog post for us early last year outlining some of the steps the industry has taken to address the subject. Well worth a read for anyone interested in this issue. His conclusion:

No cyber security program will be 100% perfect.  These interim measures well position the plants to ensure that the public health and safety are maintained, and that the sites will reliably continue to make their significant contribution to the nation’s electrical supply.

---

We can’t really answer for the NRC and what it might need to do to digitally clean its house. We can say that this is a partisan report. Sen. Tom Coburn (R-Okla.), the committee’s ranking member, keeps the pot at a simmer in presenting the report’s findings on his We site.

“Weaknesses in the federal government’s own cyber security have put at risk the electrical grid, our financial markets, our emergency response systems and our citizens’ personal information,” Dr. Coburn said.  “While politicians like to propose complex new regulations, massive new programs, and billions in new spending to improve cyber security, there are very basic – and critically important – precautions that could protect our infrastructure and our citizens’ private information that we simply aren’t doing.”

So, yes, partisan. I’m not sure the report addresses risks to infrastructure or financial markets – agencies overseeing them, perhaps, but that’s not the same thing. It seems to both want and not want regulation; it just depends on what’s being regulated. It’ll be interesting to see how or even if the NRC responds to this report.

Labels:

Comments

Post a Comment

Popular posts from this blog

Activists' Claims Distort Facts about Advanced Reactor Design

By
Below is from our rapid response team . Yesterday, regional anti-nuclear organizations asked federal nuclear energy regulators to launch an investigation into what it claims are “newly identified flaws” in Westinghouse’s advanced reactor design, the AP1000. During a teleconference releasing a report on the subject, participants urged the Nuclear Regulatory Commission to suspend license reviews of proposed AP1000 reactors. In its news release, even the groups making these allegations provide conflicting information on its findings. In one instance, the groups cite “dozens of corrosion holes” at reactor vessels and in another says that eight holes have been documented. In all cases, there is another containment mechanism that would provide a barrier to radiation release. Below, we examine why these claims are unwarranted and why the AP1000 design certification process should continue as designated by the NRC. Myth: In the AP1000 reactor design, the gap between the shield bu...
23 comments
Read more

What Happens During a Refueling Outage?

By
You may have noticed over the past few weeks that a number of nuclear plants are shut down for refueling outages or are resuming operations after just returning from one. This type of routine outage usually occurs in the spring or fall when electricity demand is low so that nuclear reactors can replace about one-third of the spent fuel rods with new fuel and conduct other routine maintenance and repairs at the plant. To get a better sense of how refueling works at a nuclear energy facility, I spoke with Marcus Nichol, NEI’s senior project manager for used fuel storage and transportation, and asked him to explain the basics. Why does a nuclear plant need to replace one-third of its fuel? Nichol: The main purpose of a refueling outage is to replace older fuel that is depleted—meaning it can no longer efficiently produce energy from nuclear fission reactions—with new fuel. This “used fuel” has typically been used in the reactor for four-and-a-half to six years before it is pe...
6 comments
Read more

How Much Land Does Nuclear, Wind and Solar Really Need?

By
Not too long ago, we reviewed a report that looked at nuclear energy (and other energy sources) as biodiversity agents. This had to do, in part, with the amount of land a facility needs to function. Nuclear energy and fossil fuel plants use relatively little, wind farms and solar arrays quite a lot of land . Based on an objective and transparent analysis of our sustainable energy choices, we have come to the evidence-based conclusion that nuclear energy is a good option for biodiversity conservation (and society in general) and that other alternatives to fossil fuels should be subjected to the same cost–benefit analyses (in terms of biodiversity and climate outcomes, as well as sociopolitical imperatives) before accepting or dismissing them. Writer Barry Brook, who collected 75 scientists to endorse his paper, is interested in land use as it impacts flora and fauna. Biodiversity concerns do not get as much play as they might – and, when they do, it annoys many when land is withdraw...
4 comments
Read more