How does NANTeL address cyber security considerations in modern nuclear I&C?

• A. By removing all network connections.
• B. By applying secure coding, network segmentation, access controls, anomaly monitoring, and alignment with cybersecurity standards for safety-critical systems.
• C. By relying on physical security alone.
• D. By using default passwords.

Answer: (B)

Security in modern nuclear I&C relies on a layered, defense-in-depth approach, and NANTeL implements that through several complementary practices. Secure coding reduces software flaws that could be exploited in safety-critical control systems. Network segmentation isolates critical I&C networks from less secure parts of the system, limiting how a breach can spread. Access controls enforce least privilege, ensuring that only authenticated users and devices can perform authorized actions. Anomaly monitoring provides real-time detection of unusual or unauthorized behavior, enabling rapid response to potential cyber threats. Aligning with established cybersecurity standards for safety-critical systems ensures rigorous, auditable controls and consistency with best practices. Together, these elements create a robust security posture that addresses cyber risks without sacrificing operational capability. Relying on entirely removing networks, depending on physical security alone, or using default passwords would leave clear vulnerabilities and undermine safety.