nuclear-news

Cybersecurity in the Nuclear Industry: US and UK Regulation and the Sellafield Case

Key Points:

With both the U.S. and U.K. strengthening their regulatory frameworks and increasing enforcement powers, nuclear facilities should take steps now to review and upgrade cybersecurity measures. This includes not just updating technical controls, but also ensuring compliance with security plans, auditing systems, and maintaining proper documentation.

Real-world examples from both the U.S. and U.K. demonstrate that nuclear facilities are being targeted by sophisticated cyber attackers, including state actors. This isn’t just a theoretical risk—it’s happening now, and facilities must take it seriously.

The successful prosecution of Sellafield with significant fines (£332,500) shows that regulators are now willing to take strong enforcement action, even when no actual breach has occurred. Nuclear facilities cannot afford wait for an incident before improving their cybersecurity—they must be proactive……………………………………………..

 JD Supra 6th March 2025,
https://www.jdsupra.com/legalnews/cybersecurity-in-the-nuclear-industry-2447724/

March 8, 2025 - Posted by Christina Macpherson | safety, UK