Strategic outcomes and delivery 4. Ensure sufficient resources are allocated to cyber security and resilience to transform capability in the sector Current situation n 30. Duty holders are regulated by the independent ONR and are subject to inspections to ensure that they meeting their security and safety obligation. All sites have programmes in place to improve both their cyber and physical security. However, the resources allocated to cyber are usually a small percentage of the total budget. aw Aim Industry: Will ensure that cyber security is considered as part of decisions to improve physical security and safety. This will potentially identify cost savings where the desired outcome can be achieved by a more optimal mix of the three areas.  Industry will also work with Government to develop a clearly defined career development path and further development opportunities for a cyber security professional in the civil nuclear sector. This will grow both the pool of suitably qualified and experienced cyber security personnel in the sector, as well as raising personnel’s cyber security capability.  Government: Will support industry in identifying blockers to resources being allocated to cyber and support industry-wide working to reduce costs and provide better value for money where appropriate. Government will also work with industry to raise industry personnel’s cyber security capability. This will include building cyber into existing and new apprenticeship and graduate programme into the sector and identify gaps within existing cyber security training, and working with international partners to ensure that these gaps are covered. W ith dr   Regulator: Will continue to develop their cyber security training programme and implement outcome focussed regulation of cyber security and cyber resilience. This will allow industry to own their cyber security risk and make informed decisions on the level of the resources required to address the vulnerability. 17