:::
Critical Digital Asset Identification Workshop
Last Update: Sep 01, 2025
Date: August 18-21, 2025




Location: GIS MOTC Convention Center
Participants: 28 professionals from Taiwan’s nuclear security and cybersecurity sectors
Activity:
In addition to complying with the Cyber Security Management Act, Taiwan’s nuclear power plants also refer to the U.S. Nuclear Regulatory Commission (NRC) Regulatory Guide RG 5.71 for the protection of industrial control systems. Under this framework, the digital components that support nuclear safety, security, and emergency preparedness functions are defined as Critical Digital Assets (CDAs) and are protected through a defense-in-depth strategy. Cybersecurity at nuclear power plants is also regarded as an core element of nuclear security. To further enhance the management and protection of CDAs at Taiwan’s nuclear facilities, as well as to strengthen Taiwan–U.S. technical exchange and cooperation in nuclear security, the Nuclear Safety Commission (NSC) invited experts from National Nuclear Security Administration of the U.S. Department of Energy (DOE/NNSA) to Taiwan to jointly host the Critical Digital Asset Identification Workshop.
This training was led by two DOE/NNSA experts specializing in the cybersecurity of CDAs at nuclear facilities. A total of 28 participants took part, representing Taiwan Power Company, nuclear power plants, the NSC, and the National Atomic Research Institute (NARI).
The course focused on methods for identifying CDAs, defense-in-depth strategies and security controls, as well as consequence and sensitivity analyses, drawing on best practices from the Nuclear Energy Institute (NEI), the U.S. NRC, and the International Atomic Energy Agency (IAEA). Exercises gave participants practical experience and enhanced their ability to implement effective cybersecurity measures and management practices at nuclear power plants.
In response to the increasing occurrence of cybersecurity incidents affecting industrial control systems worldwide, the NSC continues to actively engage in international collaboration in introducing the latest knowledge and practical training in nuclear power plant cybersecurity, fostering professional expertise and enhancing the effectiveness of cybersecurity management and protection. These efforts demonstrate Taiwan’s determination to strengthen the cybersecurity defense and resilience of its critical infrastructure.

Group photo of instructors and participants

Lecture delivered by instructors

Exercise and group discussion
“Cyber in a Case” practical exercise