The Nuclear Regulatory Commission is facing a mass exodus of cybersecurity experts in the years ahead, which could limit its ability to ensure the nation’s nuclear power plants are safe from digital attacks, an internal watchdog found……….
As of March 31, NRC officials had inspected 24 of the 57 power plants under its jurisdiction. While assessments “generally provide reasonable assurance that nuclear power plant licensees adequately protect digital computers, communications systems and networks,” auditors said, the agency could be hindered if the NRC doesn’t ramp up its recruitment and training efforts. …….
The situation at NRC is a symptom of the government’s broader struggle to recruit tech and cyber talent amid an aging workforce.
The IG advised NRC to improve its process for addressing skill gaps and managing its workforce, leaning on practices laid out in its existing Strategic Workforce Planning initiative.
Auditors also urged the agency to include more performance testing in its cybersecurity inspections. While today’s inspections focus largely on compliance, collecting data on vulnerability assessments, patching frequency and software management could make the process more efficient and effective, auditors wrote.https://www.defenseone.com/technology/2019/06/nuclear-energy-regulators-need-bring-more-cyber-experts-watchdog-says/157559/
nuclear-news 
Leave a comment