Cyberwiz-Pro Supports NEI 13-10 Guidance, Rev5
Nuclear Energy Institute’s NEI 13-10 is an effort to reduce the workload associated with Critical Digital Assets assessments. The guidance document provides a strategy for grouping CDAs as Direct, Emergency Planning or Indirect, based on the importance of a plant’s safety and security functions and emergency planning requirements. NEI 13-10 Rev 5 expands on the previous revisions and allows for grouping of simpler, lower complexity devices into classes.
WizNucleus Cyberwiz-Pro incorporates NEI 13-10’s Consequence Assessments form data directly into the tool. This enables assessors to standardize future assessments and create a sustainable program. In Cyberwiz-Pro, CDA assessments can be changed to different classes or categorized with the click of a button. The software gives assessors complete control over revision report generation. To avoid unnecessary rework, any assessments done outside Cyberwiz-Pro software can be easily uploaded into the tool. The classes and decisions from NEI 13-10 are already built into Cyberwiz-Pro so that the decisions can be automated where possible.
Direct Support for NEI 13-10 in Cyberwiz-Pro
- Repeat or reuse entire assessments
- Upload XLS files effortlessly
- Maintain consistency across your fleet—versions and assessments
- Automatically populate 13-10 questions
- Copy work from previous assessments into new assessments
- Report accurately and flexibly
Helping Build a Repeatable, Efficient and Sustainable Nuclear Cyber Security Program
While NEI 13-10 provides excellent guidance to help classify and manage the simple assessment, Cyberwiz-Pro goes beyond the six predefined classes found in NEI 13-10 Rev 5. Cyberwiz-Pro supports an advanced “Type Assessment” methodology for all the CDAs in scope. The tool’s techniques make it possible to group maximum number of CDAs in efficient manner, while maintaining the assessment results and individual reports at specific CDA levels.
Using CWP’s automation capability and flexibility, nuclear plants can dramatically improve efficiency, and create a sustainable program. Leveraging the predefined responses during the baseline assessment and processes will be crucial when the program is handed from the Cyber teams to the Engineering teams. The engineering teams can then access previous assessments and:
- reuse entire assessments while adding new CDAs to those assessment packages
- copy related assessment responses to new assessment revisions
- choose from predefined answers on a per control/per category basis
- choose which assessment revision is appropriate to be used as a new assessment starting point
- run reports showing only the controls that are not addressed by applying SCIS/Logic in the tool