NEI 13-10 Guidance, Rev5 in Cyberwiz-Pro
Nuclear Energy Institute’s NEI 13-10 is an effort to reduce the workload associated with Critical Digital Asset assessments. The guidance document provides a strategy for grouping CDAs as Direct, Emergency Planning or Indirect, based on the importance of a plant’s safety and security functions and emergency planning requirements. NEI 13-10 Rev 5 expands on the previous revisions and allows for grouping of simpler, lower complexity devices into classes.
WizNucleus Cyberwiz-Pro incorporates NEI 13-10’s Consequence Assessment form data directly into the tool. This enables assessors to standardize future assessments and create a sustainable program. In Cyberwiz-Pro, CDA assessments can be changed to different classes or categorized with the click of a button. The software gives assessors complete control over revisions and report generation. To avoid unnecessary rework, any assessments done outside the software can be easily uploaded into the tool. The classes and decisions from NEI 13-10 are already built into Cyberwiz-Pro so the process can be automated wherever possible.
Direct Support for NEI 13-10 in Cyberwiz-Pro
- Repeat or reuse entire assessments
- Upload XLS files effortlessly
- Maintain consistency across your fleet—versions and assessments
- Automatically populate 13-10 questions
- Copy work from previous assessments into new assessments
- Report accurately and flexibly
Helping Build a Repeatable, Efficient and Sustainable Nuclear Cyber Security Program
While NEI 13-10 provides excellent guidance to help classify and manage assessment son the low-functionality and more simple CDAs, Cyberwiz-Pro goes beyond the six predefined classes found in NEI 13-10 Rev 5. Cyberwiz-Pro supports an advanced “Type Assessment” methodology for all the CDAs in scope. The tool’s techniques make it possible to group the maximum number of CDAs in efficient manner, while maintaining the assessment results and individual reports at specific CDA levels.
Using CWP’s automation capability and flexibility, nuclear plants can dramatically improve efficiency, and create a sustainable program. Leveraging the predefined responses and decisions made during the baseline assessment processes will be crucial when the program is handed from the Cyber teams to the Engineering teams. The engineering teams can then access previous assessments and:
- reuse entire assessments while adding new CDAs to those assessment packages
- copy related assessment responses to new assessment revisions
- choose from predefined answers on a per control/per category basis
- choose which assessment revision is appropriate to be used as a new assessment starting point
- run reports showing only the controls that are not addressed by applying SCIS/Logic in the tool