A Revised Model for Nuclear Security Culture International

A Revised Model for Nuclear Security Culture International Conference on Nuclear Security 10 -14 February 2020 Presented by: Jeffrey R. Miller, Ph. D

Nuclear Security Culture is a Basic Principle 7. Every state should, in order to protect individuals, society and the environment, take appropriate measures necessary to ensure: (a)that the radioactive sources within its territory, or under its jurisdiction or control, are safely managed and securely protected during their useful lives and at the end of their useful lives; and (b) the promotion of safety culture and of security culture with respect to radioactive sources. International Atomic Energy Agency. Code of Conduct on the Safety and Security of Radioactive Sources. IAEA/CODEOF/2004.

Model of Nuclear Security Culture International Atomic Energy Agency. Nuclear security culture implementing guide. IAEA nuclear security series No. 7 ISSN 1816– 317 No. 7. Vienna. 2008.

IAEA Model of Nuclear Security • Thirty observable traits • Traits are important for a strong security culture • Traits fall into one of three categories: • • management systems • leadership behavior • personnel behavior Observable traits can be measured International Atomic Energy Agency. Nuclear security culture implementing guide. IAEA nuclear security series No. 7 ISSN 1816– 317 No. 7. Vienna. 2008. p 18.

Security Culture Evaluation Methods § Survey Instrument ü 30 items (one per trait); 3 -point scale (needs improvement, meets expectations, exceeds expectations) ü 2 items to measure change (in the past year, in the next year) § Focus Groups Security Culture Baseline Data Analysis & Interpretation ü 8 -12 participants ü Semi-structured questions based on traits Devise & Implement Improvement Initiatives § In-depth Interviews with Managers ü One-on-one ü Semi-structured questions based on traits 5

Results • Data collected at 8 sites from September 2017 – May 2018 • 685 participants completed the survey • 77 in-depth interviews • 112 focus groups • 608 focus group participants • 1, 500+ interview comments • 3, 800+ focus group comments 6

Mean Scores for Survey Items Mean Scores Expectations Collaboration Equip and Protect Execution Monitor Improvement Item #16 – Decision Making reflects nuclear security as a core value Item #21 – Adherence to Procedures – procedures are always followed to avoid errors Pattern 7

Survey Highest and Lowest Rated Items Highest 6) Information Security protects sensitive information through classified matter protection and control 27) Vigilance – security risks are promptly identified 1) Visible Security Policy states the commitment of the organization to nuclear security 16) Decision Making reflects nuclear security is a core value 18) Work Management makes sure that nuclear security is not compromised Lowest 11) Change Management minimizes the impact of change on security systems 26) Management Oversight – managers spend time observing and reinforcing work activities 13) Work Environment supports performing at a high level (e. g. , working equipment; clear procedures; management interest in employee issues) 21) Adherence to Procedures – procedures are always followed to avoid errors 17) Motivation – desirable attitudes and behaviors are recognized and rewarded 8

Comparison between Managers and Non-Managers 17) Motivation – desirable attitudes and behaviors are recognized and rewarded 14) Record Keeping - records and logs books are easy to use and accurate 1 = Needs Improvement, 2 = Meets Expectations, 3 = Exceeds Expectations 9

Overall Security Culture Perceptions 34% 46% 10

Focus Group Strengths Understand the importance of the mission Personal accountability and professional conduct Willingness to selfreport Cyber security and protection of classified information Peer to peer communication 11

Focus Group Areas for Improvement Managing risks associated with changes New technology Generational differences and knowledge transfer Changes / unclear policies New hires and associated issues 12

Management Interview Themes Strengths Areas for Improvement • Effective Communications • Change management ü Multiple channels ü Keeping up with new technology ü Recognize importance ü M&O contract ü Continues to improve ü New hires and site workforce • Reinforce vigilance • Personal Accountability ü Employees self-report ü Motivate the workforce ü Security taken seriously at all levels ü Positive feedback (mission related) ü Provide required resources 13

Revised Nuclear Security Culture Model 14

Questions? 15