USSC LLC together with Rosenergoatom Consortium JSC have completed a project devoted to the audit of cybersecurity of industrial process control systems of four Nuclear Power Plants (NPPs): Leningrad NPP, Kola NPP, Novovoronezh NPP and Kalinin NPP.
The purpose of this project was to assess the current state of information security systems applied in industrial process control systems and to explore opportunities to improve protective measures against current threats to information security.
As part of the project, the team of USSC experts has:
- inspected comprehensively industrial process-control systems of NPP;
- analysed retrospectively the amount of implemented recommendations given upon the results of previous audits;
- analysed organizational and technical measures taken for ensuring information security of industrial process control systems;
- assessed compliance of applicable measures and applied information security hardware and software.
Upon results of the audit, recommendations were given to improve control procedures and to ensure information security for industrial process control systems. Solutions offered as recommendations take into account industry requirements of Rosatom State Atomic Energy Corporation.
"We are grateful to our partners from Rosenergoatom for their cooperation and the opportunity to apply our knowledge and experience to ensure information security of their assets. We are sure that implementation of our offered solutions will improve information security systems at nuclear power plants and make them even safer for the environment and people. The USSC team will continue to work on improving methods and approaches to ensuring information security for greater reliability and stability of nuclear power plants in the long term," Alexey Komarov, regional representative of USSC, said.
"I would like to express my gratitude to colleagues from USSC for conducting an audit of information security systems at nuclear power plants. Due to this work, we managed to obtain an independent assessment of the state of our information security systems applied in industrial process control systems of NPP, as well as to identify areas for their improvement and upgrading. The comprehensive approach of USSC experts to the survey, analysis and assessment enabled us to accurately identify our information security strengths and weaknesses, which will undoubtedly contribute to further improving the protection level of nuclear power plants from potential threats. We appreciate their professionalism and effective work organization," a representative of Rosenergoatom Concern JSC, said.