Strategic outcomes and delivery 1. Delivering a comprehensive understanding of the cyber vulnerabilities across the civil nuclear sector Current situation n 27. The civil nuclear sector have been supported by NCSP funded work to identify their key cyber assets, and identifying ways that they can improve their cyber security and ability to recover from a cyber attack. aw Aim Industry: Will ensure that their organisation has a clear cyber security governance chain, which includes a board member who is able to champion cyber security at board level discussions. They will be supported by a suitably qualified and experienced Chief Information Security Officer (CISO) who can effectively explain to the board the vulnerabilities that cyber poses to their organisation and the mitigation plan that they have in place.  Industry will also conduct a review of all the risks that cyber poses to their organisation (safety, security, operational, financial and reputational). This will then be used to prioritise intervention by the perceived threat and potential consequence of compromise.  Government: Will work with agencies to ensure that briefing provided by agencies enables industry to understand the risk, and thereby assign the appropriate level of resources to manage and mitigate any risks. The Government will also facilitate industry forums where the sector can discuss the issues their organisations face and share best practice.  Regulator: Will work with the NCSC and BEIS to ensure that its cyber security capability continues to develop so it can continue to provide assurance to Government and the general public that sites are identifying vulnerabilities through their multi-function inspection programme. W ith dr  14