Risk Assessment Methods for Cybersecurity in Nuclear Facilities: Compliance to Regulatory Requirements

Abstract

As strategic infrastructures, nuclear facilities are considered attractive targets for attackers to commit their malicious intention. At the same time, for efficiency, those infrastructures are increasingly implemented, equipped with, and managed by digitally computerized systems. Attackers, therefore, try to realign their attack scenarios through such cyber systems. It is crucial to understand various existing risk assessment methods for cybersecurity in nuclear facilities to prevent such attacks. Risk assessment is designed to study the nature of the originated attack threats and the consequences implied. This paper studies a series of risk assessment methods implemented for security related to cybersecurity of strategic infrastructures, including nuclear facilities. Extended from cybersecurity, the required concepts in nuclear security cover defense-in-depth, synergy of safety and security, and probabilistic safety/risk assessment. Selecting cybersecurity risk assessment methods should integrate these three essential concepts in their evaluation. This paper highlights the suitable and appropriate risk assessment methods that meet security requirements in the nuclear industry as specified in the national and international regulations.

Accelerating SME growth in the African context: Harnessing FinTech, AI, and cybersecurity for economic prosperity

“…The significance of cybersecurity is further underscored by the need for risk assessment methods in critical infrastructures, including nuclear facilities, to secure data, peripherals, and systems (Setianingsih et al, 2021). As the demands for cybersecurity increase, the need for risk assessment on cybersecurity also rises, especially in critical infrastructures (Setianingsih et al, 2021).…”

“…The significance of cybersecurity is further underscored by the need for risk assessment methods in critical infrastructures, including nuclear facilities, to secure data, peripherals, and systems (Setianingsih et al, 2021). As the demands for cybersecurity increase, the need for risk assessment on cybersecurity also rises, especially in critical infrastructures (Setianingsih et al, 2021). Additionally, the predictions of cybersecurity experts on future cyber-attacks and related cybersecurity measures emphasize the importance of knowledge of common attack methods and the use of cybersecurity software to thwart hackers and preserve data privacy (AL-Hawamleh, 2023).…”