10 C.F.R. § 53.860 – Security programs.

(a) Physical protection program. Each holder of an OL or COL under this part must develop, implement, and maintain a physical protection program under the following requirements:
1. (1) The licensee must implement security requirements for the protection of special nuclear material based on the type, enrichment, and quantity in accordance with 10 CFR part 73, as applicable, and implement security requirements for the protection of Category 1 and Category 2 quantities of radioactive material in accordance with 10 CFR part 37, as applicable; and
2. (2) The licensee must demonstrate compliance with the provisions set forth in either § 73.55 or § 73.100 of this chapter.
(b) Fitness-for-duty. Each holder of an OL or COL under this part must develop, implement, and maintain a fitness-for-duty program under 10 CFR part 26.
(c) Access authorization. Each holder of an OL or COL under this part must develop, implement, and maintain an access authorization program under § 73.56 or § 73.120 of this chapter, as applicable.
(d) Cybersecurity. Each holder of an OL or COL under this part must develop, implement, and maintain a cybersecurity program under § 73.54 or § 73.110 of this chapter.
(e) Information security. Each holder of an OL or COL under this part must develop, implement, and maintain an information protection system under §§ 73.21, 73.22, and 73.23 of this chapter, as applicable.