Cybersecurity initial events of digital instrumentation and control systems using physical accident scenarios

The digital transformation of the nuclear industry has elevated cybersecurity concerns, particularly with digital instrumentation and control (I&C) systems. These systems introduce unique vulnerabilities to cyber threats, yet traditional risk assessments often understate their potential impacts. This study emphasizes the importance of focusing on the physical consequences of cyber incidents rather than the specific pathways of network exploitation. To address this, the research proposes a novel approach integrating cyber-attack scenarios into Probabilistic Risk Assessment (PRA) frameworks by classifying cyber-attacks based on their physical consequences and mapping them to initial events in PRA models. Using the Molten Salt Reactor Experiment (MSRE) as a case study, the approach demonstrates how cyber-induced scenarios mimic traditional accident scenarios, bridging the gap between digital vulnerabilities and physical system impacts. This integration enriches PRA methodologies by incorporating cyber–physical risks and offers a more comprehensive risk management framework that aligns modern cybersecurity challenges with established safety practices. This research contributes to the evolution of PRA methodologies by incorporating cyber threats, paving the way for enhanced integration of safety measures in a digitally transformed nuclear landscape. • Integration of cyber-attack scenarios into PRA frameworks is performed. • The integration focuses on physical impacts of cyber threats. • A case study application is performed using MSRE. • Cyber-distinct events not linked with known physical impacts are also identified.