MODÉLISATION INTÉGRÉE DES RISQUES CYBER-PHYSIQUES POUR LES INSTALLATIONS NUCLÉAIRES : VERS UNE ÉVALUATION DYNAMIQUE ET FONDÉE SUR LES DONNÉES

Abstract

The digital transformation of nuclear facilities increases the interdependence of information technologies, operational systems, physical devices, and human actors, while existing risk-assessment approaches often remain domain-specific. This study aims to design an integrated framework for dynamic cyber-physical risk assessment. Design Science Research is adopted as the overarching methodology, supported by a systematic review structured according to PRISMA 2020 to identify scientific gaps and derive design requirements. The resulting artifact is the Nuclear Integrated Cyber-Physical Risk Assessment Framework (NICPRAF), which connects nuclear safety, nuclear security, cybersecurity, IT/OT environments, human factors, and governance. The framework organizes multi-source data qualification and fusion, evolving risk assessment, and decision support under human supervision. Its contribution lies in integrating dimensions commonly addressed separately and in establishing traceability between literature gaps and the functions of the proposed artifact. NICPRAF remains conceptual and has not yet undergone operational validation. Future work will focus on prototype development, representative case studies and digital twins, and evaluation of its integration with security-monitoring platforms.