A leading international energy firm working to develop a new generation of nuclear power stations in the UK needed a world class Integrated Security Solution (ISS) for a proposed two-unit Advanced Boiling Water Reactor (ABWR) New Nuclear Power Plant (NPP). The solution had to defeat the most rigorous physical and cyber- attacks from a given threat capability, and meet relevant national and international standards.
CNI -Nuclear Power Station
background
The firm required subject matter experts able to apply the principles of evolving nuclear regulations in the UK that were moving to an outcome-focussed framework with a greater emphasis on the people aspects of security infrastructure. The integrated solution had to extend from the outer most ring of security measures to the inner most ring, and use different parts of the system to provide information to the whole. Coupled with the physical and cyber aspects, the security solution must include the arrangements for developing a security culture – the ‘SQEPness’ of the organisation – its resilience and its integration into the overall company structure.
Outcome
From 2018-19 we designed and developed the required documentation for the client’s review and ultimately, acceptance. The proposed ISS incorporated multiple layers of security systems that could absorb a degree of failure, without creating vulnerabilities in the security of the site. We designed it to utilise innovative technology and deliver a cost-effective solution to be developed in parallel with the Client’s Nuclear Site Security Plan.
We successfully fulfilled our roll as principle security design consultant up until the decision by the client in February 2019 to abandon its investment plans in the UK.
Services delivered
Consultancy Services delivered included:
- An innovative Effects Based Security Design (EBSD), aligned with the regulatory goal based approach, providing clarity over the requirements needed to achieve project success.EBSD is a security planning technique that allows for the efficient application of resources to counter an acknowledged threat profile;
- Innovative but well-tested Cyber Resilience and Information Assurance methodologies;
- A clear technical work stage programme in line with the Centre for the Protection of National Infrastructure (CPNI) and the Royal Institute of British Architects (RIBA) best practices to prove an unambiguous development process for the easy adoption of design consultants and other construction stakeholders; and,
- A well-conceived and rehearsed project management methodology based on international standards that provides a clear and accountable structure by which to deliver the ISS project.
Method
We fused together industry leading and highly respected firms each with demonstrable experience in the nuclear and CNI sectors. The G4S team had demonstrable experience in delivering similar largescale, complex and critical projects at Hinkley Point B, Hinkley Point C, Sellafield and other CNI projects including the London Olympic Park. We also drew upon the knowledge and experience of our sister company G4S Nuclear Security Services Corporation (G4S NSSC) in the US, which has delivered several projects in the US nuclear sector. The client was able to benefit from our individual and combined leadership in premium security risk management services, providing unique access to UK and international best practice and incorporating our demonstrable experience of supporting the nuclear sector.
The proposed solution was outcome-focused to meet the new security principles described in the Office for Nuclear Regulation’s Security Assessment Principles. The solution therefore was not constrained by existing or previous practices and was to consider and incorporate innovative solutions to deliver the outcomes.
The methodology commenced with the design team reviewing documentation such as:
- Operational Requirements documents
- Previous design works
- International and Domestic standards (e.g. BSEN 50131, PD6662, ISO 27000 series)
- UK Government Guidance (ONR, CPNI, NCSC)
- Industry good practice (GPG, NCSC architectural patterns, BSIA)
- For cyber overlay; physical security design information.
The design team confirmed design assumptions and the specific requirements for each building/facility they were undertaking works on.
The design documentation underwent peer review by SQEP individuals after the design team had completed their works to ensure that the design parameters have been applied correctly against the requirements.
Download our CNI Capability Brochure for more details.