russia’s cyber security policy for atomic energy sector

The study analyzes the policy of russia on atomic energy cyber security. we use two levels (legal and practical) to analyze cyber strategy, institutions and experi-ence (policies) of russia’s atomic energy security. we reveal laws and policy pa-pers regulating cyber security policy in russia. we analyze the priorities men-tioned in cyber strategies as well as terms, goals, and bodies in charge (institu-tions) of atomic energy cyber security. in addition, the research considers official statistics data, experts’ surveys, regulatory documents of the federal service for technical and export control (fstec) and sectoral agencies (in particular, ros-energoatom). we conclude that the current requirements developed by fstec or rosenergoatom are, on the one hand, mandatory for use, as well as with other parties that are sufficiently technical, taking little account of the managerial and organizational issues of information security provided in the iaea documents. on the other hand, there are no obstacles to apply the iaea documents in rus-sia, which do not contradict russian law. however, there are objects of critical infrastructure which are not judicable to rosenergoatom or rosatom. today, there are no specific information security requirements for such objects.