Orange County NC Website
C. The Threat— Dr. Edwin Lyman <br /> I'm Ed Lyman from the Nuclear Control Institute, and I'd like to thank the Orange <br /> County Commissioners for their hospitality. It is always refreshing to get out of Washington, <br /> especially these days. I would not turn down an invitation like this. I was asked to talk about <br /> the issues of terrorist threats in nuclear power plants and their vulnerabilities with regard to <br /> terrorism. What I would like to do is really document what we believe the state of nuclear power <br /> plant security was before September 11`h. The Chairman of the Nuclear Regulatory <br /> Commission, Richard Meserve, only a few weeks ago, told Congress that, and I quote, "Before <br /> September 11, 2001, nuclear power plants were among the best defended and most hardened <br /> facilities of the nation's critical infrastructure." This is the line that the Nuclear Regulatory <br /> Commission and the industry have been peddling since the September 11`h attacks as <br /> justification for the inaction that has taken place. I think the point of this talk is simply to make it <br /> perfectly clear exactly what the vulnerabilities were before September 11`h and what they <br /> appear to be even after September 11`h. So, what do we have? The state of nuclear power <br /> plant security in general; since the 1970's it was recognized that nuclear power plants might be <br /> a potential target of the terrorists and that the consequences as Dave pointed out could be <br /> catastrophic. So, the Nuclear Regulatory Commission did decide to impose some regulation <br /> that meant the plant had to protect against the potential for an attack of a commando team <br /> whose intent was to cause enough damage to the plant to cause a meltdown and the kind of <br /> consequences that we just saw in the previous slides. To do this, the commission postulated <br /> what is called a design basis threat, which is essentially, according to the regulation, several <br /> persons with the assistance of an active or a passive insider. An active insider is someone who <br /> would actually be working inside the plant and participate actively in the attack. When the <br /> attack was taking place, let's say he or she were in the control room, he would be able to <br /> manipulate the controls, he could kill the other operators, he could do all sorts of mischief <br /> actively. Passive simply means that he was in a role where information was provided to the <br /> external attacker so that they would have information about the plant layout and the physical <br /> protection system when they attacked. In the early 1990's, the NRC added another regulation <br /> that the plant also had to provide some protection against truck bombs. This was in response to <br /> the first World Trade Center bombing in 1993 and also an incident at the Three Mile Island plant <br /> where an intruder was able to drive a vehicle into the site and disappear for four hours. So they <br /> imposed a regulation where there had to be some sort of way of preventing truck bombs from <br /> getting close enough to the plant so that if they were detonated they could cause damage and <br /> again potentially a release of radiation. Aircraft attack was never contemplated in the design <br /> basis threat and it is not today. Now, how did the plants comply with this? They had to come <br /> up with a physical security plan, which is a description of how their guards would respond if the <br /> plant were attacked. Complementary to this were controls for access authorization meaning <br /> individuals who had unescorted access to the vital areas of nuclear power plants had to be <br /> vetted, they had to have background checks to make sure they were trustworthy and had no <br /> ulterior motives that could come across in the background. Finally, access control is simply a <br /> system making sure that the people who get onto the plant site are the ones who are <br /> appropriately authorized to do so. It also includes the placement of vehicle barriers to prevent <br /> large truck bombs from getting close enough to the plant to do harm — in a position where they <br /> cannot get close enough to the plant to do harm without having been searched first. <br /> The NRC introduced a program in 1991 to test security at these plants, which <br /> was called the Operational Safeguards Response Evaluation. And this was introduced because <br /> it was recognized that even if the utility was perfectly in compliance with every element of the <br /> regulation, it is possible that they still may fail to prevent the plant from being sabotaged. So it <br /> was actually a way of testing the particular response strategy that would be executed by the <br /> guards. And the way OSREs were run, they would have four separate force on force drills, <br />