2. International Atomic Energy Agency 0 Meeting on Security Culture Embassy of Hungary, Vienna, 24 April 2012 Towards a CBRN Security Culture: Sharing Nuclear Security Experience Dr. Khammar Mrabit Director, Office of Nuclear Security Department of Nuclear Safety and Security

3. International Atomic Energy AgencyContents Background Evolution & Importance of Nuclear Security Culture IAEA Activities in Nuclear Security Culture Nuclear Security Culture in the context of CBRN Terrorism Conclusion 1

4. International Atomic Energy Agency Background 2

5. 3 Nuclear Security Threats Threats to nuclear security involve criminals or terrorists acquiring and using for malicious purposes: Nuclear weapons Nuclear material to make IND Radioactive material for RDD or RED Threats could also involve radioactive material dispersion through sabotage of facility or transport.

6. Global Nuclear Security Framework National & Regional Nuclear Security Infrastructure IAEA Nuclear Security Guidelines IAEA Peer Reviews & Advisory Services E&T CRP Knowledge Networks Regulatory & Law Enforcements Agencies Operation & Use TSOs, Research, Education & Training International Legal Instruments Conventions: CPPNM & 2005 Amend., UNSCR 1540. CoC on Safety & Security of Rad. Sources & INFCIRC/225/Rev. 5

7. International Atomic Energy Agency The Key Nuclear Security Elements State Responsibility Identification and Definition of Duties and Responsibilities Legislative and Regulatory Framework International Transport Offenses and Penalties Including Criminalization International Cooperation and Assistance Identification and Assessment of Targets and Consequences Use of Risk-Informed Approaches Detection of Nuclear Security Events Planning/ Preparedness/ Response to a Nuclear Security Event Sustaining a Nuclear Security Regime Security culture is vital for sustaining a nuclear security regime 5 IAEA Nuclear Security Fundamentals define the following key elements:

8. International Atomic Energy Agency Evolution & Importance of Nuclear Security Culture (NSC) 6

9. International Atomic Energy Agency NSC as a Fundamental Principle Included in the “ The Physical Protection Objectives and Fundamental Principles” endorsed by the BoG and welcomed by GC in September 2011. Recognized by the International Conference on Nuclear Security in 2005 - “The fundamental principles of nuclear security include embedding a nuclear security culture thought the organizations involved. By the coherent implementation of a NSC, staff remain vigilant of the need to maintain a high level of security” 7

10. International Atomic Energy Agency NSC as a Fundamental Principle (Cont’d) Incorporated in Amendment to the CPPNM, July 2005 8 Fundamental Principle F — Security Culture: “All organizations involved in implementing physical protection should give due priority to the security culture, to its development and maintenance necessary to ensure its effective implementation in the entire organization”.

11. International Atomic Energy Agency Nuclear Security Summit The Washington NSS in 2010 underlined the importance of NSC: “Participating States will work to promote and sustain strong nuclear security culture” 9

12. International Atomic Energy Agency Nuclear Security Summit (Cont’d) The Seoul Summit last month: Underlined that investment in human capacity building is fundamental to promoting and sustaining a strong nuclear security culture Encouraged governments, regulatory bodies, industry, academia, nongovernmental organizations and the media, to fully commit to enhancing security culture Welcomed the effort by IAEA to share experience and lessons learned and to optimize available resources Encouraged States to promote a security culture that emphasizes the need to protect nuclear security related information 10

13. International Atomic Energy Agency IAEA Activities in Nuclear Security Culture 11

14. International Atomic Energy Agency 12 IAEA Definition of Nuclear Security Culture Implementing Guide NSS-7 The assembly of characteristics, principles, attitudes and behaviour of individuals, organizations and institutions which serves as a means to support and enhance nuclear security. Appropriate NSC ensures that the implementation of nuclear security measures receive the attention warranted by their significance.

15. International Atomic Energy Agency Nuclear Security Culture Model The nuclear security culture model described in the IAEA Guide is derived from a widely used 3- layer model of organizational culture 13

16. International Atomic Energy Agency Nuclear Security Culture Model BELIEFS AND ATTITUDE PRINCIPLES MANAGEMENT SYSTEMS BEHAVIOUR Leadership Personnel BELIEFS AND ATTITUDE PRINCIPLES MANAGEMENT SYSTEMS BEHAVIOUR Leadership Personnel 14

17. International Atomic Energy Agency Beliefs and Attitudes Exist in people’s minds Beliefs and attitudes: are developed through experience are developed over time affect individual behaviour ultimately affect nuclear security effectiveness Important for security personnel and also others in organizations 15

18. International Atomic Energy AgencyPrinciples Instilled by managers into organization Seen as guiding decisions of management Principles for guiding decisions and behaviour are: motivation leadership commitment and responsibility professionalism and competence learning and improvement 16

19. International Atomic Energy Agency Management Systems Visible security policy Clear roles and responsibilities Performance measurement Work environment Training and qualification Work management Information security Operation and maintenance Continual determination of trustworthiness Quality assurance Change management Feedback process Contingency plans and drills Self-assessment Interface with the regulator Coordination with off-site organizations 17

20. International Atomic Energy Agency Importance of Behaviour Leadership behaviour Expectations Use of authority Decision making Management oversight Involvement of staff Effective communications Improving performance Motivation Personnel behaviour Professional conduct Personal accountability Adherence to procedures Teamwork and cooperation Vigilance 18

21. International Atomic Energy Agency Role of International Community 19 States have common interest in nuclear security - national legislation & regulation International community provides guidance in security areas and facilitates assistance International Instruments: CPPNM, Nuclear Terrorism Convention, UNSC resolutions 1373 & 1540, CoC …etc. support the need for nuclear security, including NSC IAEA offers publications, training and assistance programmes on NSC

22. International Atomic Energy Agency 20 Role of State Establish legal and regulatory framework to foster effective NSC State organizations that may be involved: Nuclear regulator Law enforcement Military Health ministry Intelligence Emergency response Public information

23. International Atomic Energy Agency 21 Role of Organizations Within a State various organizations have responsibilities associated with nuclear security. Each organization should have: Nuclear security policy Management structure Resources Management systems Review and improvements

24. International Atomic Energy Agency Role of IAEA: Establishment of Nuclear Security Series Publications 1 3 6-4-15 8-4-16 Fundamentals; Objective and Essential Elements Recommendations Implementing Guides Technical Guidance 17 Published – 8 in Final Stage – 31 Planned 22

25. International Atomic Energy Agency Role of IAEA: Provision for application of Guidance: Education & Training E & T in figures: About 30 different NS training courses were designed. About 60 events (training courses, workshops) organized per year. About 10.200 participants from 120 States were trained in 400 training events. 23

26. International Atomic Energy Agency Role of IAEA: Provision for application of Guidance: Education & Training (Cont’d) A partnership between the IAEA and universities, research has been established:INSEN Mission: to enhance global nuclear security by developing, sharing and promoting excellence in nuclear security education Created in 2010 42 participants from 21 States: 26 universities, 2 international organizations & several other stakeholders

27. International Atomic Energy Agency Role of IAEA: Provision for application of Guidance: Education & Training (Cont’d) Created in Jan- Feb 2012 - Created in Jan- Feb 2012 - 47 participants: 30 countries, GP, EU, UNODA, UNODC, 1540 Committee and WINS. Mission: To contribute to global efforts to enhance nuclear security through an effective and collaborative network of Nuclear Security Training and Support Centres Objectives: promote a high level of nuclear security training and support services as a cornerstone in the development of sustainable national, regional and global nuclear security training and support centres; facilitate the cooperation and assistance activities to optimize the use of available resources and leverage those resources to meet specific needs. Based on experience learned from Nuclear Safety Networks and International Nuclear Security Education Network experience

28. International Atomic Energy Agency Role of IAEA: Provision for application of Guidance: Education & Training (Cont’d) Global umbrella with regional sub groups

29. International Atomic Energy Agency Role of IAEA: Regional Workshop on NSC: Objectives - To provide a basic awareness and understanding of NSC - To give an insight into the relevant international and national legal instruments that impact on NSC - To provide an understanding of the universal features of NSC, including the roles of the State, organizations, managers, good institutional governance and the attitudes of individuals - To discuss the experience in enhancing the NSC within organization and with the public and the measures taken to sustain their security activities - To familiarize attendees with basic elements of evaluation methodology IAEA Workshop methodology is applicable for security culture familiarization and discussion in non-nuclear areas (chemical, bio) 27

30. International Atomic Energy Agency Role of IAEA: Peer Reviews IPPAS – International Physical Protection Advisory Service 28 Service organized since 1996 54 Missions to 37 States IPPAS reports are confidential Provides assessment of the NSC in operation, maintenance and self-assessment

31. International Atomic Energy Agency Synergy between Safety and Security Culture Principal shared objective of Nuclear Security and Nuclear Safety: the protection of people, society and the environment from the effects of harmful nuclear radiation Safety and Security Culture attributes are similar: -Safety and security are clearly recognized values -Leadership for both is a prerequisite for success -Accountability for both is a fundamental requirement -Safety and security should be integrated into all other activities -Safety and security are learning and experience driven 29

32. International Atomic Energy Agency Synergy vs. Challenge: Communication For Safety Culture, all individuals are prevailed upon to share information openly for transparency and openness In the same way, Security Culture requires that individuals respond immediately to confirmed or perceived threats and incidents, but restrict communication to non sensitive/classified information Safety- Security interface and communication patterns could be used for CBRN culture consideration 30

33. International Atomic Energy Agency Nuclear Security Culture in the context of CBRN Terrorism 31

34. International Atomic Energy Agency CBRN Security Culture Workshop 2012 Organized by the Centre for International Trade and Security at University of Georgia, USA, 6-8 Feb. 2012 Participants included international organizations (IAEA, OPCW, UNODA, WHO), government officials as well as NGOs and business community, involved in combating CBRN terrorism Shared experience in establishment and maintenance of security culture Recognized IAEA record, experience and achievements in enhancement of nuclear security culture Considered CBRN security culture in context of UNSC Resolution 1540 32

35. International Atomic Energy Agency Towards Sustainable CBRN Security Culture Outcomes of CBRN Security Culture Workshop: CBRN threat environment is common and requires culture ‐ based approach in combating WMD proliferation and terrorism Security cultures exist in respective areas to protect sensitive materials and prevent acts of chemical bio- of radiological sabotage Promotion of security culture requires sufficient communication between CBRN sectors and good practice sharing 33

36. International Atomic Energy Agency Towards Sustainable CBRN Security Culture Outcomes of CBRN Security Culture Workshop (Cont’d): IAEA generic model of NSC is recommended for facilitation security culture in chemical and bio- sectors Evaluation methodology and performance indicators for security culture are needed for all CBRN sectors Efforts are under way to develop a comprehensive report on joint architecture of CBRN security culture 34

37. International Atomic Energy Agency Conclusion 35

38. International Atomic Energy AgencyConclusion Nuclear Security Culture is a mature concept – Standards and Guidance established and used by many States IAEA is developing an action plan to provide further technical guidance on security culture to a variety of nuclear facilities and radioactive source operators At the same time drawing on its concept of nuclear security culture, IAEA is sharing its experience with chemical and bio sectors 36

39. International Atomic Energy Agency Conclusion (Cont’d) A more integrated approach and a common foundation of CBRN security culture will significantly facilitate global efforts against WMD terrorism UNSCR 1540 Committee or …could provide necessary vehicle to coordinate these efforts involving all relevant stakeholders 37

40. International Atomic Energy Agency 38 …Thank you for your attention K.Mrabit@iaea.org