Civil Nuclear Cyber Security Strategy 2022 Ministerial Foreword As the Minister for Energy, Clean Growth and Climate Change, I am delighted to present the 2022 Civil Nuclear Cyber Security Strategy, which sets out an ambitious vision and five year roadmap of activities for the UK’s civil nuclear sector. This vision cannot be achieved by any organisation in isolation, so I am delighted that the strategy has been developed and endorsed jointly with UK civil nuclear organisations, the Office for Nuclear Regulation and the National Cyber Security Centre. I look forward to working together with them to strengthen the cyber security of the UK’s civil nuclear sector. The United Kingdom was the world’s first civil nuclear nation, and nuclear energy has powered homes and businesses in this country for over 60 years. As a source of low carbon power, nuclear energy will play a crucial role in reducing the UK’s greenhouse gas emissions to net zero in 2050. It is also an important part of accelerating homegrown power for greater energy security. The sector supports 60,000 jobs across the whole nuclear fuel cycle – from enrichment to decommissioning and waste management – and at both a national and regional level. Its importance to the UK’s national security, energy needs, and economy will only continue to grow, so it’s never been more important to ensure that the sector is well-positioned and resilient against cyber threats. The Government published the new National Cyber Strategy at the end of 2021, setting out our vision to maintain the UK’s standing as a leading, responsible and democratic cyber power. Cyber represents a huge opportunity for UK businesses: transforming ways of working, promoting innovation, and increasing productivity and efficiency. However, it also creates opportunities for malicious actors to exploit, attack and disrupt networks in efforts to extort money or valuable intellectual property. We recognise that we have come a long way, but we still have more to do. The 2022 Civil Nuclear Cyber Security Strategy sits beneath the national framework and outlines how we will deliver its objectives together within the UK’s civil nuclear sector. As both the cyber threat and digital technologies continue to evolve, it is crucial that we make a step change to stay ahead of the curve. Managing cyber risks requires a whole-of-organisation effort, underpinned by strong regulation, supported by sector-wide collaboration, and a positive security culture. The commitments set out in this strategy seek to collectively deliver that shared ambition, ensuring that the UK’s civil nuclear sector will continue its legacy long into our net zero future. Greg Hands MP Minister of State for Energy, Clean Growth and Climate Change Department for Business Energy and Industrial Strategy 4