Risk Informing Security at the US Nuclear Regulatory Commission

The US Nuclear Regulatory Commission (NRC) has efforts underway to better risk inform security regulations. The NRC has conducted four workshops to obtain stakeholder feedback on how to accomplish this. The most recent workshops were conducted by INMM and focused on interactions between safety and security risk specialists, cyber security, insider mitigation and perception of risk. In addition, the NRC staff is responding to recommendations from a NRC Risk Management Task Force that concluded in 2012. Among its recommendations was to better communicate between safety and security to allow both disciplines to leverage off each other. This paper will summarize the current initiatives to better risk inform security