Protection of Digital Computer and Communication Systems and Networks

Issuing agencies

Abstract

The U.S. Nuclear Regulatory Commission (NRC) is denying a petition for rulemaking (PRM), dated June 12, 2014, submitted by Anthony Pietrangelo on behalf of the Nuclear Energy Institute. The petitioner requested that the NRC amend its power reactor cyber security regulations to make them consistent with the original intent of the rule and clarify that the scope of those regulations only require the protection of those digital assets that can directly cause core damage and spent fuel sabotage, or whose failure would cause a reactor scram. The petition was docketed by the NRC on September 22, 2014, and assigned Docket No. PRM-73-18. The NRC staff has determined that the information presented in PRM-73-18 does not support rulemaking. The NRC has also determined that existing and ongoing revisions to guidance can effectively address the issues raised by the petitioner in this PRM. Therefore, for the reasons discussed in the SUPPLEMENTARY INFORMATION of this document, the NRC is denying PRM-73- 18.