Basic Cyber Security Considerations for Licensees of Radioactive Materials and Registrants of Radiation Producing Devices in an Era of Remote or Hybrid Compliance Inspections

Abstract

The onset of the COVID pandemic impacted various regulatory agencies’ ability to safely fulfill their regulatory compliance inspection mandates via on-site inspections. Some agencies shifted to a remote or hybrid inspection process, which necessitates the electronic transmittal of a variety of records that may or may not have been transmitted in this fashion in the past, raising concerns about the records being sent and received securely. Considering this new environment, some basic cyber security diagnostic considerations are described for radiation source permit holders to consider prior to responding to an apparent legitimate regulatory inspection request, both in the current COVID cyber risk environment and the environment likely to exist into the future.