Nuclear Safety Standards Committee 35 th Meeting 24 – 28 June 2013

1. Nuclear Safety Standards Committee35th Meeting24 – 28 June 2013 Agenda item 1.8.3 Nuclear Security Guidance Committee Ian Barraclough, Office of Nuclear Security

2. NSGC up to 2nd meeting • NSGC established March 2012 • 1st meeting (June 2012) largely procedural • Terms of Reference • Development and review process for NSS • Transitional arrangements for documents already in preparation • Approval of Nuclear Security Fundamentals • Between 1st and 2nd NSGC meetings • Fundamentals endorsed by Board, Sept. 2012 • Interface Group meeting, Sept. 2012 • 33 safety standards with security interface • 13 security guidance with safety interface (at least one SSC) • Development of publications plan

3. 2nd NSGC Meeting, 10-14 Dec. 2012 • Review and approval of NSS DPPs, drafts • 1 Implementing Guide approved for publication (after resolution of issues raised in ‘tacit approval’ process) • 1 Technical Guidance approved for MS comment • 3 DPPs for Implementing Guides approved, one with recommendation to expand scope • 9 DPPs for Technical Guidance approved, several with recommendation to combine and/or extend scope • 1 DPP to be changed from Technical Guidance to update of existing Implementing Guide • Review and “clearance”of DPPs and drafts of interface documents • 2 NUSSC drafts cleared for MS comment • Comments on DS419 (RASSC) strongly against ‘integrated’ approach to safety & security, proposing replacement of text on security with cross-references to guidance • 3 DPPs cleared (2 RASSC, 1 TRANSSC)

4. 2nd NSGC meeting, contd • NSGC recommendations on NSS publications plan • Simplify – focus on shorter term priorities • Clearer explanation of rationale for structure and prioritization • Stronger prioritization of first tier of Implementing Guides • Implementing Guides with broadest possible scope • Low priority for detailed Technical Guidance • Especially where ‘parent’ Implementing Guide not yet developed or where for very specific situations • Secretariat to modify plan, taking account of NSGC comments, and submit to 3rd NSGC meeting • Criteria and process for approving NSGC observer organizations

5. Since 2nd NSGC meeting • Transitional arrangements (agreed at 1st NSGC meeting) • 6 Implementing Guides submitted for MS comment without prior NSGC (or SSC) approval • Review Committee members informed • These are last agreed exceptions to normal process • Deadlines late June / early July • SPESS B and SPESS C now also for security • 3rd meeting of NSGC – 13-17 May 2013

6. 3rd NSGC Meeting, NSS docs • 2 DPPs for Implementing Guides approved (re-submissions with expanded scope) • 3 DPPs for Technical Guidance on computer security approved • 1 on I&C systems by normal process • 2 others (assessment and incident response) by ‘fast track’ • DPPs for 2 Implementing Guides on computer security requested – one overarching for all of nuclear security, one for regulated facilities and activities (update of NSS 17) • 2 DPPs for Technical Guidance to be re-submitted • When Implementing Guides they support are better established • Nuclear Security Series Glossary • For time being, based only on published NSS • To be used as working material by drafters and reviewers • Work to start on improvements, still within scope of NSS

7. 3rd NSGC Meeting, Interface docs • 3 GSR drafts cleared with minor comment • DS450 for submission to CSS • DS456, DS457 for MS comment • DS433 cleared for submission to CSS subject to changes to text referring to security (4.1, 4.8, 4.9) • Text on security is to raise awareness, not to provide guidance • Explain where interfaces exist, cross-reference security guidance, possibly give examples of security considerations • NSNS proposed revised text • NSGC to review at October meeting (before CSS) • DS419 (RASSC) discussed again in light of Chairs’ discussion following CSS • NSNS to review text on security in light of NSGC’s comments (as for DS433) • Revised version to NSGC at October meeting • 2 WASSC Safety Guides cleared with minor comment • 3 DPPs cleared (DS472, DS473, DS475)

8. Other outcomes from NSGC-3 • Roadmap • General ‘top down’ approach agreed • Extend roadmap to include all guidance published, in progress and planned • Priorities for review of existing Implementing Guides, development of new ones • ‘Fast track’ process for urgently needed guidance • ‘Interim guidance’ to be developed outside NSGC process and published outside NSS • When interim guidance ready for publication, NSGC to decide when/whether to initiate process for NSS guidance to replace it • Observer organizations • Criteria approved • SPESS A • Secretariat to start developing a version for security

9. NSGC-4, w/c 28 October 2013 • Regular business: NSS and interface documents • Several NSS just completing MS comment now • Further consideration of NSGC ToR • Can take account of discussions on SSC ToR • Proposed approach to independent review of intermediate Committee structure • To be completed before end of NSGC’s term • Further update of ‘roadmap’ • Including expected supporting guidance