Security of Safety Important I&C Systems - Nuclear Power Plant Instrumentation and Control Systems for Safety and Security - page 236

Figure 1. A classification of existing regulatory documents

• Regulatory documents related to FPGA

technology.

Modern standards such as the ISO/IEC 27000
series are not directly applicable to the cyber
protection of critical I&C systems due to their
specificities, including inherent regulatory and
safety requirements. The focus of IEC 62645 is
in issue of requirements for computer security
programs and system development processes in
order to prevent and/or minimize the impact of
attacks against computer-based systems. This
standard is based on ISO/IEC 27000 standards
series and implies that any International Atomic
Energy Agency (IAEA) and country specific
guidance can expand area of the standard.
The ISA 99 series includes standards, recom-
mended practices, technical reports, and related
information that can define procedures for imple-
menting electronic security measures and security

• Regulatory documents related to security.

In the category related to critical I&C systems,
one of the most important documents is a Commit-
tee Draft of IEC 62645 (IEC 62645, 2011). This
document represents an approach to establishing
requirements and providing guidance for the de-
velopment and management of effective security
programs for NPP I&C systems, implementation
of life cycle for I&C system security and briefly
describes main security controls. IEC 62645
is limited to security of NPP I&C systems and
intended to be used when modernizing existing
NPP and for designing new nuclear power plants,
throughout the life cycle.