New Publication – Guide for Assessing Cybersecurity Programs at Gamma Irradiation Facilities

The iia is pleased to announce the publication of the ‘Guide for Assessing Cybersecurity Programs at Gamma Irradiation Facilities’.

Cybersecurity has become an increasing priority for all businesses in recent years.  The impact of a cyberattack can result in financial loss, the inability to operate or provide a service, or the loss of assets such as data or facilities.  Operators of gamma irradiation facilities additionally need to prevent cyber vulnerabilities from being introduced into a physical security system that protects their cobalt-60 sources.

This document makes the key assumption that there is already an existing computer security system to assess.  It focuses on maintaining and sustaining existing cyber programs through assessments that help to identify vulnerabilities and good practices and recommend improvements to arrangements where necessary.  It provides practical guidance on assessment activities, approaches and timetables, supported by checklists and templates.  Further reading and other guidance, including that on the implementation of a cybersecurity program, is available and highlighted in the document.

At the time of publication, there is a lack of standards on cybersecurity programs specifically for users of radioactive sources.  In recognition of this, the iia collaborated with Sandia National Laboratories (SNL) to undertake initiatives around cybersecurity at gamma irradiators.  The first step was for experts from SNL to perform an assessment at an irradiator operated by a member of iia’s Gamma Working Group.  This enabled a greater understanding of the specific and typical needs of gamma irradiator operators and enabled creation of this guidance.  The iia would like to thank everyone who supported this initiative and give particular thanks to Jenna deCastro and Mike Rowland of SNL who were the lead authors of this document.

The iia continues to work on this cybersecurity initiative and plans to publish a cybersecurity best practice guide for operators of gamma irradiators later in 2025.

Read ‘Guide for Assessing Cybersecurity Programs at Gamma Irradiation Facilities’ →