CMMC Phase II Suspended: What It Means for NNPP Vendors
The Pentagon suspended CMMC Phase II on July 13, 2026. Protection requirements are unchanged. What the suspension means for contractors handling NNPI, and what it does not.
Read moreNuclear Compliance & Security
Expert compliance and security consulting from former NRC and DOE leadership—gap analysis, regulatory audits, security program development, and root cause analysis for nuclear facilities.
Gap AnalysisRegulatory AuditsProgram DevelopmentRoot Cause Analysis
Proactive Compliance. Reduced Risk. Operational Confidence.
We help nuclear organizations stay ahead of regulatory requirements—catching compliance gaps before inspectors arrive, building security programs that earn regulator confidence, and turning audit findings into operational improvements. Our approach emphasizes prevention over remediation, proactive oversight over reactive firefighting, and management accountability over individual blame.
Nuclear Security & Compliance Gap Analysis
Identify compliance gaps and vulnerabilities with comprehensive assessments against DOE and NRC requirements.
Comprehensive Security Program Gap Analysis
We identify compliance vulnerabilities before NRC or DOE inspections with comprehensive gap analysis against 10 CFR Part 73 and DOE O 470.4B requirements.
Regulatory Requirement Interpretation & Mapping
Our expert interpretation clarifies ambiguous regulatory language and maps requirements to your facility's unique characteristics—reducing over-compliance costs.
Compliance Maturity Assessments
Our maturity models benchmark your compliance program against industry best practices and identify capability gaps inhibiting operational excellence.
Pre-Operational Compliance Roadmaps
We develop phased compliance roadmaps that align security program development with construction milestones, licensing timelines, and funding availability for new nuclear projects.
DOE/NRC Regulatory Compliance Audits
Independent audits and self-assessments to verify regulatory compliance and readiness for inspections.
Independent Regulatory Compliance Audits
Our unbiased compliance assessments surface vulnerabilities before NRC or DOE inspections—providing defensible findings and remediation roadmaps.
Self-Assessment Program Design & Implementation
We design robust self-assessment programs that catch compliance drift early—building regulator confidence and reducing enforcement risk through proactive oversight.
Pre-Inspection Readiness Reviews
Our mock inspections replicate NRC or DOE protocols—identifying deficiencies, testing personnel knowledge, and building confidence before regulators arrive.
Regulatory Enforcement Response & Mitigation
We develop strategic response frameworks for NRC violations or DOE findings—creating defensible corrective actions and engaging regulators to mitigate enforcement severity.
Security Program Development for New Nuclear
Build robust security programs from the ground up for new nuclear facilities, reactors, and technologies.
Ground-Up Security Program Design
We build tailored security program architectures for new nuclear facilities—satisfying 10 CFR Part 73 or DOE O 470.4B from day one without costly rework.
Security Personnel Training & Qualification
Our tailored training curricula build security officer competence and earn NRC qualification—covering physical protection, cybersecurity, and regulatory compliance.
Insider Threat Program Development
We design comprehensive insider threat programs that balance regulatory compliance with workplace culture—detecting risks without creating toxic surveillance environments.
Cybersecurity Program Implementation for SMRs
Our SMR-specific cybersecurity frameworks satisfy 10 CFR 73.54 requirements while enabling remote monitoring, modular deployment, and operational flexibility.
Root Cause Analysis & Corrective Action Plans
Investigate incidents, identify systemic issues, and develop effective corrective action plans that prevent recurrence.
Independent Root Cause Investigations
Our independent root cause analysis identifies systemic vulnerabilities—not just individual mistakes—ensuring corrective actions prevent recurrence.
Corrective Action Program Development
Our robust CAP frameworks close findings effectively—tracking corrective actions, verifying effectiveness, and demonstrating accountability to regulators.
Extent-of-Condition & Extent-of-Cause Analysis
We conduct systematic analysis that identifies similar vulnerabilities across your organization—preventing recurring issues and demonstrating thoroughness to regulators.
Performance Monitoring & Leading Indicators
Our performance monitoring frameworks detect compliance drift before violations occur—using leading indicators, trending analysis, and predictive analytics.
Proven Results Across Nuclear Facilities
From gap analysis assessments to security program development, our former NRC and DOE leadership delivers measurable outcomes that strengthen compliance posture and reduce regulatory risk.
Compliance Excellence
Comprehensive gap analysis and audit programs that identify vulnerabilities before regulators arrive and build defensible compliance documentation.
Security Program Success
Physical Security Plans, Cyber Security Plans, and T&Q programs developed for SMR developers and advanced reactor firms navigating first-of-a-kind licensing.
Enterprise-Scale Impact
Root cause analysis and corrective action programs that address systemic vulnerabilities across complex nuclear organizations.
Who We Serve
SMR Developers & Advanced Reactor Firms
Next-generation nuclear developers navigating NRC licensing for the first time, requiring security programs that satisfy 10 CFR Part 73 without over-engineering or unnecessary cost burdens.
Primary AudienceDOE National Laboratories
Managing classified nuclear programs requiring DOE O 470.4B compliance
Nuclear Utilities
Maintaining 10 CFR Part 73 compliance and preparing for NRC inspections
Naval Shipyards
Requiring NNPI compliance programs and Naval Reactors inspection readiness
Advanced Reactor Firms
Navigating novel security challenges beyond traditional LWR requirements
Why Choose FissionPoint?
Former Regulator Perspective
Our team includes former NRC and DOE leadership who understand what regulators scrutinize during inspections and audits.
Hands-On Implementation
We partner with your team through execution, ensuring corrective actions withstand regulatory scrutiny.
Sustainable Capability Building
We transfer knowledge to your team, building the judgment needed to maintain compliance as programs mature.
Insights & Briefings
Expert perspectives on nuclear compliance, regulatory strategy, and security program development.
NN‑801: NNPI Cybersecurity
NN-801 establishes strict cybersecurity requirements for vendors processing NNPI. Learn about protecting NNPI and getting approved to process it on your network.
Read more
NNPICO: Roles, Responsibilities, and Requirements
Learn what the NNPICO role requires, where its authority comes from, and the common pitfalls that undermine NNPI compliance across the defense vendor base.
Read moreReady to Strengthen Your Compliance Program?
Schedule a consultation with our former NRC and DOE leadership team to discuss gap analysis, regulatory audits, security program development, or root cause analysis.