Strategic outcomes and delivery 2. Continuously mitigate identified issues and vulnerabilities Current situation n 28. The work from the NCSP has identified areas where the CNS or individual duty holders could improve their cyber security. The CNS industry have been managing or addressing these as part of their security enhancement programmes and risk management. Aim Industry: Will improve their management of cyber vulnerabilities by ensuring that they have identified and maintain a list of all their critical digital assets and vulnerabilities across their organisation and their supply chain. The management and mitigation of these assets will be proportional to threat of compromise and the potential consequences.  As industry’s cyber security maturity improves it will develop cyber security metrics to determine how it is performing. These metrics will have a clear reporting line to raise issues and concerns and will be discussed regularly in board meetings.  Government: Will support industry by commissioning reviews of sector wide issues, such as supply chain, and in the creation of best practice guidance. We will also facilitate support from agencies to key sites and to provide advice/assurance of mitigations when appropriate. ith dr aw  Regulator: Will provide assurance to Government and the general public that the safety and security risks that have been identified at sites are being effectively managed and mitigated. W  15