Roles and Responsibilities Roles and Responsibilities Government • Strategic direction • Legal Framework Industry Regulators Duty Holders Office for Nuclear Regulation • Manage and mitigate their cyber vulnerabilities • Assurance of supply chain • Regulate for cyber security and information assurance. • Hold industry to account on behalf of the public dr Department for Business, Energy and Industrial Strategy aw n 8. Meeting the current and future risks of compromise efficiently and effectively requires a joined up approach between the Government, regulators, operators and the supply chain. It is a balance of the right legislative framework, timely and accurate intelligence, capability and capacity to implement change and deal with the unexpected. The key roles of each of the partners in delivering this can be illustrated in the following diagram: National Cyber Security Centre • Threat and vulnerability intelligence Information Commisioner • Manage and mitigate their cyber vulnerabiliites. • Inform Duty holders of any compromises or vulnerabilities • Uphold information rights in the public interest ith Nuclear Decomissioning Authority Supply Chain • Enhance cyber security across the decommissioning estate and its subsidiaries. W Government 9. Government, through BEIS as the lead Government department for the sector, sets the strategic direction and legal framework while also bringing together threat information for the sector to be able to inform the measures they need to meet both regulatory requirements as well as their own personal risk concerns. Through the National Cyber Security Centre (NCSC) the Government also supports UK business, including the nuclear sector, in incident management and response. Finally, through the National Cyber Security Programme BEIS is supporting industry, with c£1.2m in 2015/16 to directly assist in increasing capability and capacity in the sector. The Government also 8