Sign up for our Newsletter
What’s in the newsletter?
Our community of practice hails from 90+ countries. Know Your Insiders brings their work to your inbox. Get workshop outcomes, webinar recordings, and practitioner lessons delivered for free.
Access, Authority, Knowledge
Insiders possess at least one of the following attributes that provide advantages over external adversaries when attempting malicious activities:
Access
Insiders have authorized access to the areas, equipment and information needed to perform their work. Access includes physical access to nuclear or other radioactive material facilities; nuclear materials and associated systems, components, and equipment; and computer systems. Access also includes remote computer access to a facility, such as access to computer systems and networks that control processes, provide safety, contain sensitive information, or otherwise contribute to nuclear security. The operator should not permit remote access to critical systems, such as systems relevant to safety.
Authority
Insiders are authorized to conduct operations as part of their assigned duties and may also have the authority to direct other employees. This authority may be used to support malicious acts, including either physical or computer-based acts, such as digital file or process manipulation.
Knowledge
Insiders may possess knowledge of the facility, associated activities or systems, ranging from limited to expert knowledge. This may include knowledge that could enable an insider to bypass or defeat dedicated physical protection systems and other facility systems that contribute to nuclear security, such as safety and nuclear material accounting and control (NMAC) systems, operating procedures, and response capabilities.
These attributes may also include access to, or knowledge of, sensitive information or sensitive information assets, including information regarding the transport or movement of nuclear or other radioactive material.
