OSC Global and InfraShield announced Janus Cyber, a cybersecurity teaming initiative created to help advanced reactor developers address the nuclear regulatory, Department of War (DoW) authorization, and operational technology/industrial control systems (OT/ICS) cybersecurity requirements associated with deployment on U.S. military installations.
Advanced reactors operating in U.S. military environments sit at the intersection of three distinct cybersecurity disciplines: nuclear regulatory cybersecurity, DoW authorization, and OT/ICS cybersecurity. Janus Cyber fully integrates those mandates with one coordinated team, helping developers establish an agile cybersecurity foundation that can evolve alongside the reactor design through successive iterations.
The initiative combines InfraShield’s nuclear cybersecurity regulatory strategy, advanced reactor expertise, and purpose-built technologies with the cyber engineering, authorization, and operational capabilities available across the OSC Global enterprise.
Delivery under Janus Cyber will draw on capabilities across OSC Global, with OSC Technical Solutions and OSC Edge serving as key contributors.
OSC Technical Solutions brings deep expertise in cybersecurity architecture, engineering, operations, offensive cybersecurity, and OT/ICS environments in high-consequence, regulated settings, while OSC Edge adds secure integration and defense-focused cybersecurity capabilities backed by credentials including NSA Trusted Integrator, CSfC, and C3PAO. Together, these capabilities strengthen Janus Cyber’s ability to support advanced reactor developers from early design and architecture through authorization, deployment, and ongoing operations.
InfraShield will lead nuclear cybersecurity regulatory strategy and provide its proprietary nuclear cybersecurity technologies, including vTraq®, PEEPS®, UniPath and NullCloud.ai. OSC Global will provide cybersecurity architecture, engineering, operations, offensive cybersecurity, secure integration, and DoW authorization capabilities. Governance, risk, and compliance activities will be addressed jointly based on the requirements of each engagement.
“Advanced reactor developers are being asked to design, authorize, deploy and defend complex systems on aggressive schedules,” says John Roach, president of OSC Technical Solutions (OSC Global). “They should not have to coordinate separate teams for nuclear regulatory cybersecurity, military authorization and OT security. Janus Cyber brings those disciplines together early, when design decisions are still flexible and cybersecurity can be managed as a program enabler rather than a critical-path risk.”
A reactor intended for a military installation must account for multiple regulatory, authorization, and cybersecurity requirements from the outset. The Army Reactor Regulatory Office has statutory authority to independently regulate and permit reactors deployed to support military missions, while the Army continues to mature its permitting and regulatory framework for programs such as Janus. Army public materials also describe coordination with the Department of Energy to leverage applicable safety frameworks and operational lessons learned.
At the same time, developers have a strong incentive to make cybersecurity design decisions with future commercial deployment in mind. The Nuclear Regulatory Commission’s Part 53 framework, effective April 29, 2026, provides a risk-informed, performance-based, and technology-inclusive alternative pathway for licensing commercial nuclear plants.
“Janus gives us an opportunity to apply cybersecurity differently from the start,” says Mark Rorabaugh, president and CEO of InfraShield. “The Army is embracing an iterative development model that prioritizes building, learning and improving over waiting for a perfect design. Cybersecurity needs to be just as agile. By establishing a risk-informed foundation that can evolve with the reactor design and authorization path, we can help developers adapt and customize their security architecture through successive iterations without locking in requirements too early or forcing costly redesigns as they move toward deployment and scale.”
Janus Cyber is structured to help developers address cybersecurity as a design input rather than an end-of-project compliance exercise. The team’s approach encompasses regulatory pathway development, architecture, engineering, authorization, operational readiness, supply-chain and factory-to-field cybersecurity, and offensive testing and assurance.
Where regulatory or authorization requirements evolve, the goal is to preserve the underlying architecture, evidence, and control framework wherever practical so that changing requirements can be addressed through mapping and refinement rather than costly redesign.
The team is available now to support early design-phase cybersecurity and authorization planning for advanced reactor developers pursuing opportunities on U.S. military installations.
