Inspection-Defensible Cyber-Physical Defensive Architecture

Modern nuclear facilities operate across tightly controlled trust enclaves where cybersecurity, physical security, and operational safety converge. WizNucleus enables owners to design, validate, and continuously defend these environments using a zone- and conduit-based architecture aligned to NEI 08-09 expectations and NRC IP 71130.10 inspection focus areas.

This architecture is not theoretical. It reflects how nuclear plants actually operate—air-gapped where required, tightly mediated where connectivity is unavoidable, and inspection-defensible at every boundary.

Trust Enclaves and Controlled Data Flows

At the foundation are Safety and Important-to-Safety systems, where isolation, deterministic behavior, and strict change control are mandatory. WizNucleus supports these enclaves by:

• Establishing authoritative digital asset inventories

• Enforcing configuration baselines tied to approved designs

• Maintaining evidence of isolation, interface control, and change traceability

As data moves upward into Plant Operations, WizNucleus validates that engineering workstations, HMIs, PPCs, and security computers remain correctly zoned, correctly configured, and connected only through approved pathways.

One-way data diodes and validated conduits are treated as first-class architectural controls—not assumptions—ensuring inspection-defensible separation between operations and upstream networks.