Computer security approach for Rolls-Royce spinline{sup R} safety platform - 227
The number of digital assets at commercial nuclear power plants is significant and will likely continue to increase with time. As a consequence, these plants have become potential targets for cyber-attacks. Around the world, nuclear safety authorities and national Computer and Information Security Agencies are implementing stricter regulations and inspections for critical systems in nuclear plants. There is a particular focus on instrumentation and control systems as they implement key nuclear safety functions. Rolls-Royce follows a strict computer and information security program based on general and nuclear specific norms, Rolls-Royce group processes, and proven technologies. The Spinline digital safety platform has been designed specifically for nuclear applications and features a secure development and operational environment that provides barriers against unauthorized modifications and implements design requirements promoting integrity and reliability during operation and maintenance. The Rolls-Royce secure development environment provides layers of protection utilizing physical and environmental security, human resource security, and information technology systems access control. The Spinline platform strengthens security functions by providing protection against unauthorized, unintended, and unsafe modifications to the system. The Spinline platform has design features promote integrity and reliability during operation and maintenance in the event of inadvertent operator actions or undesirable behavior of connected equipment. The Spinline technology and these computer security processes are based in a wide spectrum of international standards that were accepted as providing a secure development and operating environment by the United States Nuclear Regulatory Commission in 2014. (authors)