Applying Lessons Learned from recent Cybersecurity Incidents to the Physical Protection of Radioactive Sources

The IAEA's "Code of Conduct on the Safety and Security of Radioactive Sources" advises States to maintain the confidentiality of information about radioactive sources. Unauthorized disclosure could aid adversaries’ intent on stealing these sources, thus compromising security. Potential adversaries are developing capabilities for cyberattacks to support reconnaissance, planning, and physical attacks by compromising physical protection and access control systems. The global economy's expansion has complicated the supply chain, making it harder to ensure the authenticity and security of computer equipment. This paper will analyze recent publicized cyberattacks that can provide insights that can be applied to the protection of radioactive sources against theft or sabotage.