Following the already established trend of digital transformation of global world economy, nuclear industry is moving towards post-industrial development. The distinctive feature of the atomic industry transformation is the comprehensive implementation of information processes into all spheres of activity in the field of atomic energy use.

In Russia, a Digital strategy of nuclear sector development designed by the State Atomic Energy Corporation “ROSATOM” is currently being implemented. This strategy established, among other things, broad implementation of modern computer programmes for nuclear facilities simulation, digitization of key processes for development and safety review of innovative nuclear technologies, development and implementation of intelligent systems using various ways of machine learning, as well as broad implementation of digital twins into life-cycle management of nuclear facilities.

SEC NRS as a technical and scientific support organization to Rostechnadzor is committed to the principle of giving priority to the safe use of atomic energy. In this regard, it is involved in shaping an approach to justification and assessment of modern digital technologies used in the nuclear industry. The year 2018 was marked by introducing the amendments into the Federal Law “On the use of atomic energy”, which settled a 25-year successful practice of computer codes review applied in the process of safety analysis. For detailed information about SEC NRS approaches and practices on the software evaluation, as well as on the challenges associated with the safety review of modern digital technologies, refer to one of the articles in this issue of this newsletter.

In this newsletter, we also tried to give examples of SEC NRS R&D on development of in-house computer technologies used within scientific and technical support for safety regulation. First of all, it is necessary to mention the completed works on creation and validation of simulation models for deep disposal facilities for liquid radioactive waste (DDF LRW), and performed predictive calculations of long-term safety estimation for waste disposal after DDF LRW closure. To that end, the DDF LRW models, already established by SEC NRS, have been updated and new geofiltration and geomigration models have also been developed.

SEC NRS provides scientific and technical support to the Rostechnadzor Information and Analytical Center. As a part of this activity, our experts have developed a software tool for automatic evaluation of an event significance level based on the INES methodology. This software was successfully tested at the Rostechnadzor Information and Analytical Center during emergency response drills at nuclear power plants and it was included into Nuclear Energy Agency Data Bank.

Digitalization is one of the key areas of the ongoing improvement of the state regulation system in the use of atomic energy. For example, introduction of digital systems for on-site monitoring and control at industrial facilities provides the possibility to evaluate the accidental risk online depending on the facility operation. However, large-scale implementation of such systems in the control and oversight activity needs to deal with issues related to information and cybersecurity. The global nature of cybercrime allows no other organization to deal with cyberthreats alone, however to minimize the cyberthreats implications, to make the digital world more secure, it would be possible only together, by pooling our efforts. In this regard, this newsletter reflects the SEC NRS experience in defending our information resources against cyberthreats.

A. Khamaza, PhD,
SEC NRS Director, ETSON Vice-president.

The world entry into the digital era, when a human daily life more and more depends on the sophisticated technologies, requires the prompt and timely reaction to new challenges requiring to neutralize the potential adverse occurrences. In our modern society the progression of cyberthreats represents the continually growing threat.

Information security in SEC NRS became one of the development priorities more than three years ago together with the enactment of the «Information Security Concept» that stipulated the priority goals, major objectives, principles and ways to ensure information security and determined the corporate organizational and technical principles to ensure and manage information security, and also developed the unified corporate approaches to ensure security of information processed in the information systems and transmitted through the communication channels.

For the purpose of neutralization of the existing threats and for implementation of measures aimed to prevent infringements onto the information resources of the Centre, within a year we have realized an integrated Project devoted to creation of the information security system on the basis of the threats analysis and prediction.

The Project incorporated three major stages:

• pre-Project survey of the automated information system (hereinafter to be referred to as AIS) desigened for processing of the sensitive information;
• modernization of the existing infrastructure in line with the requirements of the legislation in the field of information security;
• certification tests to check the compliance with the requirements of information security.

At the stage of pre-Project survey, information from each AIS segment of the Center was collected and analyzed in order to elaborate the requirements to information security, to develop recommendations on updating and/or correction of the organizational-administrative documentation, as well as to upgrade and/or extend licences and to adjust the information security equipment. Based on the results of this stage a model of a hacker and information security threats was developed, and the required security level and protection class were determined.

At the second stage of the Project, a set of organizational-administrative documents was updated for all AIS segments, and information security equipment was put into operation.

At the final stage of the Project, the activities on AIS certification were carried out. In frames of this stage a technical certificate was developed together with the tests programme and methodology, which made the ground for the relevant conclusion and issue of a certificate of compliance with the information security requirements.

Stable functioning of information systems, communication equipment, as well as security thereof prevail for the SEC NRS since they are an important factor for the Center effective development in the course of executing tasks related to scientific and technical support of Rostechnadzor on the basis of advanced, including digital, technologies.

Contact

Andrey Balalaechnikov, Scientific and Engineering Centre for Nuclear and Radiation Safety (SEC NRS), balalaechnikov@secnrs.ru.

Source

Eurosafe.