NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity
Regulatory Guide 5.71 Appendix C Security Controls

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity RG5.71-C.7: Continuous Monitoring

Licensees must implement continuous monitoring mechanisms to detect anomalies and potential cyber security events.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 41 controls across 23 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 2 controls

FedRAMP High · 2 controls

  • CA-8 Penetration Testing
  • IR-4 Incident Handling

FedRAMP Moderate · 2 controls

  • CA-8 Penetration Testing
  • IR-4 Incident Handling

API 1164 · 1 control

  • API1164-13 Business Continuity and Recovery

Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) · 1 control

  • AT-DSG-6 Sections 12-13 - Image processing (video surveillance/CCTV)

BSI IT-Grundschutz · 1 control

  • BSI-17 Continuous monitoring strategy

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

  • CAT-D3-2 Detective controls

Florida Digital Bill of Rights (FDBR) · 1 control

  • FDBR-Enforcement-AG-CurePeriod Enforcement by Florida Department of Legal Affairs + Penalties + 45-Day Cure (Fla. Stat. 501.72, 501.721, 501.722)

IAIS Insurance Core Principles (ICPs) · 1 control

  • ICP-24 Macroprudential Surveillance and Insurance Supervision

IEC 62443 · 1 control

  • IEC62443-13 Network security monitoring

ISO 28001:2007 Supply Chain Security Management · 1 control

  • ISO28001-PS-01 Facility Security

ISO/IEC 27006-1:2024 · 1 control

  • 27006-9.4 Surveillance and recertification

ISO/IEC 27019:2024 · 1 control

  • ISO27019-13 Network security monitoring

ISO/IEC 27400:2022 · 1 control

  • 27400-6.5 Security monitoring and incident response

NIST Cybersecurity Framework 2.0 · 1 control

  • NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring

NIST SP 1800-32 · 1 control

NIST SP 800-190 · 1 control

NIST SP 800-53 Rev 5 · 1 control

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

  • IM8-SEC.3 Network Security

South Korea ISMS-P · 1 control

  • ISMSP-SYS-03 Security Monitoring and Log Management

TSA Pipeline Cybersecurity Directives · 1 control

  • TSAPIPE-2 OT/IT Network Segmentation and Access Control

UK Telecommunications (Security) Act 2021 · 1 control

  • UK-TSA-MON-01 Security Monitoring

US SEC Digital Assets and Crypto Regulatory Framework · 1 control

  • US-SEC-DA-SC-03 ETF Framework

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Regulatory Guide 5.71 Appendix C Security Controls

Query this from an agent

The graph holds this control, the 41 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity controls