Introduction and strategic context Introduction and strategic context aw n 1. The civil nuclear sector (CNS)6 is currently responsible for generating around 18 per cent of the UK’s electricity needs. The next generation of nuclear power stations will play an increasingly important role in the security of supply and will be a key part of the Government’s drive to move to a clean low carbon generation, meeting the legally binding targets set out in the Climate Change Act 20087, and Paris agreement8, whilst protecting consumers’ bills. For nuclear to fulfil this role, public confidence in new nuclear must be maintained. 2. Cyber security represents an enduring challenge for the civil nuclear sector and the rest of the UK’s CNI. The volume and complexity of cyber attacks against the UK are growing and the range of actors is widening. The threat is becoming increasingly global and asymmetric. Both states and non-state actors can use easily-available cyber tools for destructive purposes. ith dr 3. This is demonstrated in the 2015 National Security Strategy and Strategic Defence and Security Review9 which highlighted cyber threats as one of the four most serious national security challenges facing the UK, alongside international terrorism, state based threats, and changes in the established international order. Additionally, the 2015 National Risk Register10 also identified that the risk of malicious cyber attacks against critical infrastructure is growing. 4. The independent regulator, the Office for Nuclear Regulation (ONR), ensures the sector meets the threats through a framework of regulations set out by Government. This framework is currently being reviewed and strengthened, particularly in relation to cyber security. W 5. This five-year strategy has been developed in collaboration with industry, the ONR and other stakeholders and is in line with the proposed new regulations as well as wider European guidelines. It sets out a voluntary roadmap to enable organisations within the civil nuclear sector to meet the increasing threat from cyber and will support the 6 The civil nuclear sector covers existing electricity generation and legacy facilities, as well as supporting supply chains, and a nascent new build programme, all of which have some shared, as well as some unique characteristics, and challenges. 7 http://www.legislation.gov.uk/ukpga/2008/27/contents 8 https://unfccc.int/resource/docs/2015/cop21/eng/l09r01.pdf 9 https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/478933/52309_Cm_9161_NS S_SD_Review_web_only.pdf 10 https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/419549/20150331_2015NRR-WA_Final.pdf 6