Roles and Responsibilities has a role in setting the outcomes expected from its arm’s length bodies operating in the civil nuclear sector, particularly the Nuclear Decommissioning Authority (NDA) and the Civil Nuclear Constabulary (CNC)11. Nuclear Decommissioning Authority n 10. The NDA will enhance cyber security across the decommissioning estate and its subsidiaries. The NDA will also continue to develop its decommissioning estate wide cyber incident response policy. aw Civil Nuclear Constabulary 11. The CNC will manage their own cyber security and have appropriate plans in place to help deter, detect and prevent a blended attack. Office for Nuclear Regulation ith Industry dr 12. The ONR is responsible for independent regulation of cyber security and information assurance ensuring that industry is held to account on behalf of the public for managing and mitigating cyber risks. The ONR will also manage their own cyber security and have appropriate plans in place to help deter, detect and prevent a blended attack. W 13. The civil nuclear duty holders and supply chain will, as the subject matter expert for their systems, manage and mitigate their cyber vulnerabilities. This will be achieved by the organisation’s boards owning and managing their cyber risks. This will enable the industry to own and develop security solutions which most appropriately meet their unique situations as well as any risks not associated directly to nuclear regulations for safety and security (for example their own intellectual property, or issues of commercial sensitivity). 14. In addition they will work with the Government and ONR to measure whether the strategy is effectively improving cyber security in the sector. This will support industry and Government in targeting areas or workstreams to deliver the most significant improvements in cyber security. Duty Holders 11 The Civil Nuclear Constabulary is managed by the Civil Nuclear Police Authority, an NDPB. 9