Contents Ministerial Foreword _______________________________________________________ 4 Executive Summary ________________________________________________________ 5 1. Strategic Context ________________________________________________________ 7 1.1 The Civil Nuclear Sector _________________________________________________ 7 1.2 Cyber Security in Civil Nuclear ____________________________________________ 8 1.3 The 2017 Cyber Security Strategy ________________________________________ 12 2. What Does Good Civil Nuclear Cyber Security Look Like? _____________________ 14 3. Sector Maturity and Challenges ___________________________________________ 17 3.1 Civil Nuclear Cyber Maturity Benchmarking Assessment _______________________ 17 3.2 Sector Engagement ___________________________________________________ 18 3.3 NCSC Threat Assessment ______________________________________________ 19 4. Strategy Themes and Priorities ___________________________________________ 21 4.1 Risk Management _____________________________________________________ 22 4.2 Risk Mitigation _______________________________________________________ 24 4.3 Incident Management __________________________________________________ 25 4.4 Culture, Collaboration and Skills __________________________________________ 27 5. Implementation and Monitoring ___________________________________________ 29 5.1 Priority and Core Activities ______________________________________________ 29 5.2 Implementation and Monitoring __________________________________________ 30 5.3 Roles and Responsibilities for Strategy Delivery _____________________________ 31 Annex A – Full List of Strategy Activities _____________________________________ 33 Annex B - Glossary of Terms _______________________________________________ 44 3