Page 163 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Under 40 CFR 68, the rule requires that the owner or operator establish and implement written procedures to manage changes (except for "replacements in kind") to process chemicals, technology, equipment, and procedures; and, changes to stationary sources that affect a covered process.
Read the playbook
Under 40 CFR 68, the rule requires that the pre-startup safety review confirm that prior to the introduction of regulated substances to a process: construction and equipment is in accordance with design specifications.
Read the briefing
A licensee shipping formula quantities of strategic special nuclear material must immediately tell the consignee the departure time and confirm the transportation method, carriers, and estimated arrival time.
Read the checklist
A covered facility licensee must notify the NRC Headquarters Operations Center as soon as possible, but within 15 minutes, after initiating a security response to imminent or actual hostile action.
Read the explainer
After a qualifying accidental release, an owner or operator must submit the specified new accident-history data within six months or by the next required RMP update, whichever comes first. An owner or operator must correct required emergency-contact information within one month after it changes.
Read the guide
A stationary source must hold a public meeting within 90 days after an RMP-reportable accident with a known offsite impact and provide the accident information required by section 68.42(b).
Read the playbook
For a stationary source subject to part 68 and part 70 or 71, the air permit must list part 68 as applicable and require either a compliance schedule or certification of part 68 compliance, including RMP registration and submission.
Read the briefing
Under 40 CFR 68, the rule requires that the owner or operator inform contract owner or operator of the known potential fire, explosion, or toxic release hazards related to the contractor’s work and the process.
Read the checklist
Under 40 CFR 68, the rule requires that coordination occur at least annually, and more frequently if necessary, to address changes: At the stationary source; in the stationary source’s emergency response and/or emergency action plan; and/or in the community emergency response plan.
Read the explainer
Under 40 CFR 68, the emergency response plan maintained at the stationary source must include procedures and measures for responding after an accidental release of a regulated substance.
Read the guide