This report from former Sandia National Laboratories officials provides an analysis of the current threat landscape for nuclear facilities against cyber intrusions and attacks. It proposes a framework for a total system risk assessment and looks at the vulnerabilities for US and global facilities. The cyber threat/risk landscape for critical infrastructure in the US and around the world is constantly evolving. Because of the potentially serious consequences of compromising a nuclear power plant, these risks require rigorous attention at multiple scales ranging from individual plant operations to national scale oversight and regulatory functions. Given the growing scope of nuclear plant construction, there is a compelling need for international principles, regulatory standards, operational guidance, and technical cyber expertise. Policy and decision makers must understand the cyber threat to nuclear power plants, the potential resulting consequences, and the need for mitigation strategies. Concrete actions must be identified and implemented.
