Provides specific technical information on implementation of the defence in depth concept in the siting, design, construction and operation of nuclear power plants (NPPs). This book is intended to serve as a reference primarily for self-assessment of the comprehensiveness and quality of defence in depth provisions by NPP operators.

On the basis of the principles included in the Fundamental Safety Principles, IAEA Safety Standards Series No. SF-1, this Safety Requirements publication establishes requirements applicable to the design of nuclear power plants. It covers the design phase and provides input for the safe operation of the power plant. It elaborates on the safety objective, safety principles and concepts that provide the basis for deriving the safety requirements that must be met for the design of a nuclear power plant. Contents: 1. Introduction; 2. Applying the safety principles and concepts; 3. Management of safety in design; 4. Principal technical requirements; 5. General plant design; 6. Design of specific plant systems.

This publication describes the updated version of the method for the assessment of comprehensiveness of defence in depth and demonstrates the overall improvement in assessment results when using it. For assessment of comprehensiveness, five levels of defence in depth are considered. To ensure that safety objectives are met at each level of defence in depth, the integrity of relevant fission product barriers is maintained by the safety functions. A set of challenges to the performance of safety functions and the mechanisms leading to the challenges are specified by the method. Finally, a comprehensive list of safety provisions, which contribute to preventing these mechanisms from occurring, is specified. These provisions encompass the inherent safety features, equipment, procedures, personnel availability, personnel training and safety culture aspects. The challenges, mechanisms and provisions for all levels of defence in depth are presented in the assessment method in the form of objective trees.

Presents recent breakthroughs in the theory, methods, and applications of safety and risk analysis for safety engineers, risk analysts, and policy makers Safety principles are paramount to addressing structured handling of safety concerns in all technological systems. This handbook captures and discusses the multitude of safety principles in a practical and applicable manner. It is organized by five overarching categories of safety principles: Safety Reserves; Information and Control; Demonstrability; Optimization; and Organizational Principles and Practices. With a focus on the structured treatment of a large number of safety principles relevant to all related fields, each chapter defines the principle in question and discusses its application as well as how it relates to other principles and terms. This treatment includes the history, the underlying theory, and the limitations and criticism of the principle. Several chapters also problematize and critically discuss the very concept of a safety principle. The book treats issues such as: What are safety principles and what roles do they have? What kinds of safety principles are there? When, if ever, should rules and principles be disobeyed? How do safety principles relate to the law; what is the status of principles in different domains? The book also features: • Insights from leading international experts on safety and reliability • Real-world applications and case studies including systems usability, verification and validation, human reliability, and safety barriers • Different taxonomies for how safety principles are categorized • Breakthroughs in safety and risk science that can significantly change, improve, and inform important practical decisions • A structured treatment of safety principles relevant to numerous disciplines and application areas in industry and other sectors of society • Comprehensive and practical coverage of the multitude of safety principles including maintenance optimization, substitution, safety automation, risk communication, precautionary approaches, non-quantitative safety analysis, safety culture, and many others The Handbook of Safety Principles is an ideal reference and resource for professionals engaged in risk and safety analysis and research. This book is also appropriate as a graduate and PhD-level textbook for courses in risk and safety analysis, reliability, safety engineering, and risk management offered within mathematics, operations research, and engineering departments. NIKLAS MÖLLER, PhD, is Associate Professor at the Royal Institute of Technology in Sweden. The author of approximately 20 international journal articles, Dr. Möller's research interests include the philosophy of risk, metaethics, philosophy of science, and epistemology. SVEN OVE HANSSON, PhD, is Professor of Philosophy at the Royal Institute of Technology. He has authored over 300 articles in international journals and is a member of the Royal Swedish Academy of Engineering Sciences. Dr. Hansson is also a Topical Editor for the Wiley Encyclopedia of Operations Research and Management Science. JAN-ERIK HOLMBERG, PhD, is Senior Consultant at Risk Pilot AB and Adjunct Professor of Probabilistic Riskand Safety Analysis at the Royal Institute of Technology. Dr. Holmberg received his PhD in Applied Mathematics from Helsinki University of Technology in 1997. CARL ROLLENHAGEN, PhD, is Adjunct Professor of Risk and Safety at the Royal Institute of Technology. Dr. Rollenhagen has performed extensive research in the field of human factors and MTO (Man, Technology, and Organization) with a specific emphasis on safety culture and climate, event investigation methods, and organizational safety assessment.

The present report is a revision of Safety Series No. 75-INSAG-3 (1988), updating the statements made on the objectives and principles of safe design and operation for electricity generating nuclear power plants. It includes the improvements made in the safety of operating nuclear power plants and identifies the principles underlying the best current safety policies to be applied in future plants. It presents INSAG's understanding of the principles underlying the best current safety policies and practices of the nuclear power industry.

Countering Cyber Sabotage: Introducing Consequence-Driven, Cyber-Informed Engineering (CCE) introduces a new methodology to help critical infrastructure owners, operators and their security practitioners make demonstrable improvements in securing their most important functions and processes. Current best practice approaches to cyber defense struggle to stop targeted attackers from creating potentially catastrophic results. From a national security perspective, it is not just the damage to the military, the economy, or essential critical infrastructure companies that is a concern. It is the cumulative, downstream effects from potential regional blackouts, military mission kills, transportation stoppages, water delivery or treatment issues, and so on. CCE is a validation that engineering first principles can be applied to the most important cybersecurity challenges and in so doing, protect organizations in ways current approaches do not. The most pressing threat is cyber-enabled sabotage, and CCE begins with the assumption that well-resourced, adaptive adversaries are already in and have been for some time, undetected and perhaps undetectable. Chapter 1 recaps the current and near-future states of digital technologies in critical infrastructure and the implications of our near-total dependence on them. Chapters 2 and 3 describe the origins of the methodology and set the stage for the more in-depth examination that follows. Chapter 4 describes how to prepare for an engagement, and chapters 5-8 address each of the four phases. The CCE phase chapters take the reader on a more granular walkthrough of the methodology with examples from the field, phase objectives, and the steps to take in each phase. Concluding chapter 9 covers training options and looks towards a future where these concepts are scaled more broadly.

This publication defines a framework that represents the state of the art in assessment methodologies for safety and instrumentation and control software used at nuclear power plants. It describes an approach for developing and communicating assessments based on claims, argument and evidence. The assessment of software dependability, which encompasses properties such as safety, reliability, availability, maintainability and security, is an essential and challenging aspect of the safety justification. Guiding principles for a dependability assessment are established to provide the basis for defining an assessment strategy and implementing the assessment process. Sources of evidence for the assessment are provided and lessons learned from past digital instrumentation and control system implementation in areas such as software development, operational usage, regulatory review and platform certification are also described.

This Safety Guide provides recommendations and guidance on how to meet the requirements established in Specific Safety Requirements No. SSR-2/1 and in General Safety Requirements No. GSR Part 4 for the identification of structures, systems and components (SSCs) important to safety in nuclear power plants and for their classification on the basis of their function and safety significance. This Safety Guide is intended primarily for use by organizations involved in the design of nuclear power plants, as well as by regulatory bodies and their technical support organizations. The Safety Guide can also be applied to other nuclear installations subject to appropriate adjustments relevant to the specific design of the type of the facility being considered.

Computer security is increasingly recognized as a key component in nuclear security. This publication outlines a methodology for conducting computer security assessments at nuclear facilities. The methodology can likewise be easily adapted to provide assessments at facilities with other radioactive materials.

Deterministic safety analysis is an essential component of safety assessment, particularly for safety demonstration of the design of nuclear power plants (NPPs). The objective of deterministic safety analysis is to confirm that safety functions can be fulfilled and that the necessary structures, systems and components, in combination with operator actions, are effective in keeping the releases of radioactive material from the plant below acceptable limits. Deterministic safety analysis, supplemented by further specific information and analysis, including probabilistic safety analysis, is also intended to demonstrate that the source term and the potential radiological consequences of different plant states are acceptable, and that the possibility of certain conditions arising that could lead to an early or a large radioactive release can be considered as 'practically eliminated'. The publication has been updated to maintain consistency with current IAEA safety requirements and to reflect lessons from the Fukushima Daiichi accident. It takes into account current practices and experience from deterministic safety analyses for NPPs being performed around the world.