Abstract:
In this paper we will reflect upon the necessity to follow the national cyber security requirements, which are also addressed to operators of nuclear and highly radioactive materials (NR). We will begin with an overview of the current state of cyber security in the NR domain from the legislative and technical perspective and we will present for consideration an overview on the recently approved Minimum Cyber Security Requirements for state entities [1], which includes the regulatory authorities (RA) and NR operators of category I and II. The implementation of these requirements will lead to an increased level of cyber security and will upgrade the regulatory processes. These requirements will also provide clear technical guidance for the all entities, including the ones from the NR domain in order to apply these controls within their infrastructure. The document on Minimal Security Requirements describes cyber security and some physical security controls, as well as contains requirements for security testing, design basis threat (DBT) and inclusion of cyber security requirements in all processes in the organization.