Strategic outcomes and delivery 3. Improve the sector’s capability to detect, respond, and recover from cyber incidents Current situation n 29. The civil nuclear sector has well-established security and safety exercise programmes. However, these programmes inclusion of cyber as a vector for an incident is less mature. aw Aim Industry: Will work with Government and the regulator to develop its existing exercise programme so that cyber is included as a potential vector. This will allow duty holders to test that its plans, policy and procedures enable the organisation to identify, manage, defeat and recover from a cyber incident.  Industry will have identified all of its critical assets and have plans in place for how they can be recovered from a failure, and how they would provide assurance that they achieved this. In addition industry will where appropriate have solutions in place to identify whether a hostile actor has gained access to their Information Technology (IT) or Operational Technology (OT) estate.  Government: Will provide best practice guidance on how industry can detect, defeat and recover from a cyber incident. Government will also continue to develop the civil nuclear cyber security exercise programme, taking into account lessons learnt from any relevant cyber incidents. ith dr  Regulator: Will provide assurance that duty holders have appropriate measures in place to detect, respond and recover from a cyber incident. W  16