NEI 13-10 Guidance in Cyberwiz-Pro
Nuclear Energy Institute’s NEI 13-10 is an effort to reduce the workload associated with Critical Digital Asset assessments. The guidance document provides a strategy for grouping CDAs as Direct, Emergency Planning or Indirect, based on the importance of a plant’s safety and security functions and emergency planning requirements. NEI 13-10 allows for grouping of simpler, lower complexity devices into classes.
WizNucleus Cyberwiz-Pro (CWP) automates the classification of devices into categories, including Full Direct, Indirect, EP or A1-B3. By automating categorization you eliminate user error, inconsistencies and are able to auto-populate decisions based on walkdowns and plant processes. This enables Nuclear Plants to standardize assessments and create a sustainable program. In addition to the categorization, CWP incorporates NEI 13-10’s Consequence Assessment form data directly into the tool. The software gives assessors complete control over revisions and report generation. To avoid unnecessary rework, any assessments done outside the software can be easily uploaded into the tool.
Direct Support for NEI 13-10 in Cyberwiz-Pro
- Automated categorization of devices A1-B3
- Repeat or reuse entire assessments
- Consume manual assessments and XLS files
- Maintain consistency across your fleet—versions and assessments
- Automatically populate 13-10 questions
- Copy work from previous assessments into new assessments
- Report accurately and flexibly
Helping Build a Repeatable, Efficient and Sustainable Nuclear Cyber Security Program
While NEI 13-10 provides excellent guidance to help classify and manage assessments on the low-functionality and more simple CDAs, Cyberwiz-Pro goes beyond the six predefined classes found in NEI 13-10. CWP supports an advanced “Type Assessment” methodology for all the CDAs in scope. The tool’s techniques make it possible to group the maximum number of CDAs in an efficient manner, while maintaining the assessment results and individual reports at specific CDA levels.
Using CWP’s automation capability and flexibility, nuclear plants can dramatically improve efficiency, and create a sustainable program. Leveraging the predefined responses and decisions made during the baseline assessment processes will be crucial when the program is handed from the Cyber teams to the Engineering teams. The engineering teams can then access previous assessments and:
- reuse entire assessments while adding new CDAs to those assessment packages
- copy related assessment responses to new assessment revisions
- choose from predefined answers on a per control/per category basis
- choose which assessment revision is appropriate to be used as a new assessment starting point
- run reports showing only the controls that are not addressed by applying SCIS/Logic in the tool