The risk of a serious cyber attack on civil nuclear infrastructure is growing, as facilities become ever more reliant on digital systems and make increasing use of commercial ‘off-the-shelf’ software, according to a major new report from Chatham House.

Cyber Security at Civil Nuclear Facilities: Understanding the Risks is the result of an 18-month study that draws on in-depth interviews with 30 leading industry practitioners based in more than eight countries. It found that the trend to digitization, when combined with a lack of executive-level awareness of the risks involved, means that nuclear plant personnel may not realize the full extent of their cyber vulnerability and are thus inadequately prepared to deal with potential attacks. 

Specific findings include:                

• The conventional belief that all nuclear facilities are ‘air gapped’ (isolated from the public internet) is a myth. The commercial benefits of internet connectivity mean that a number of nuclear facilities now have VPN connections installed, which facility operators are sometimes unaware of.
• Search engines can readily identify critical infrastructure components with such connections.
• Even where facilities are air gapped, this safeguard can be breached with nothing more than a flash drive.
• Supply chain vulnerabilities mean that equipment used at a nuclear facility risks compromise at any stage.
• A lack of training, combined with communication breakdowns between engineers and security personnel, means that nuclear plant personnel often lack an understanding of key cyber security procedures.
• Reactive rather than proactive approaches to cyber security contribute to the possibility that a nuclear facility might not know of a cyber attack until it is already substantially under way.

In the light of these risks, the report outlines a blend of policy and technical measures that will be required to counter the threats and meet the challenges. 

Recommendations include:

• Developing guidelines to measure cyber security risk in the nuclear industry, including an integrated risk assessment that takes both security and safety measures into account.
• Engaging in robust dialogue with engineers and contractors to raise awareness of the cyber security risk, including the dangers of setting up unauthorized internet connections.
• Implementing rules, where not already in place, to promote good IT hygiene in nuclear facilities (for example to forbid the use of personal devices) and enforcing rules where they do exist.
• Improving disclosure by encouraging anonymous information sharing and the establishment of industrial CERTs (Computer Emergency Response Team).
• Encouraging universal adoption of regulatory standards.

The Chatham House Prize is awarded to the person, persons or organization who is deemed to have made the most significant contribution to the improvement of international relations in the previous year. The presentation ceremony and panel discussion with the winners will be livestreamed on Wednesday.

The Blue Planet II series highlighted the damage caused by discarded plastics to the world’s oceans and marine wildlife. It is estimated that there are more than 150 million tonnes of plastic in the world’s oceans; resulting in the deaths of 1 million birds and 100,000 sea mammals each year. 

Dr Robin Niblett, director of Chatham House said: ‘Plastic pollution is one of the gravest challenges facing the world’s oceans, and undoubtedly an international issue. Sir David and the BBC Studios Natural History Unit played an instrumental role in helping to put this issue at the forefront of the public agenda. Blue Planet II spurred a passionate global response and generated clear behavioural and policy change.’

This year the G20 agreed on an international framework to address marine plastic litter, acknowledging the increasing urgency of the issue and the need for an international solution. This follows action from the UK government, including a plan to ban common plastic items and investment in global research.

See full award citation

Read more about Chatham House's research work in this area

Other nominees

Dr Niblett thanked Chatham House members for voting and acknowledged the outstanding achievements of the 2019 nominees:

Abiy Ahmed, prime minister of Ethiopia, nominated for his efforts to transform civic leadership and promote plural politics, free speech and peace in Ethiopia 

Katrín Jakobsdóttir, prime minister of Iceland, nominated for her commitment to gender equality and women’s financial inclusion in Iceland 

Event

The Prize was presented to Sir David and Julian Hector by Her Majesty The Queen at Chatham House on Wednesday 20 November.

Watch video from the event

For more information please contact

Chatham House Press Office
pressoffice@chathamhouse.org
+44 (0)207 957 5739

BBC Studios Natural History Unit Communications Manager
Lynn.li@bbc.co.uk
+44 (0) 7513 137893

About the Chatham House Prize

The Chatham House Prize is voted for by Chatham House members, following nominations from the institute’s staff. The award is presented on behalf of the institute's patron, Her Majesty the Queen, representing the non-partisan and authoritative character of the Prize.

The Chatham House Prize was launched in 2005. Previous recipients of the Prize include the Committee to Protect Journalists, Colombian president Juan Manuel Santos, president of Ghana John Kufuor, Médecins Sans Frontières and Melinda Gates, co-founder of the Bill and Melinda Gates Foundation.

Chatham House is a world-leading policy institute based in London. Our mission is to help governments and societies build a sustainably secure, prosperous and just world. We engage governments, the private sector, civil society and our members in open debate and private discussions about the most significant developments in international affairs.  Our research and policy ideas involve rigorous analysis of critical global, regional and country-specific challenges and opportunities.

About BBC Studios Natural History Unit 

BBC Studios Natural History Unit produces the world’s most iconic natural history programmes, such as Blue Planet II and Planet Earth II, which have been watched by more than a billion people globally. Ranging from technically challenging live shows and super-landmarks to long-running series and children’s content, The Natural History Unit programmes include Dynasties, Blue Planet Live, Springwatch, Animal Babies: First Year On Earth, Andy’s Dinosaur Adventures as well as the currently on air Seven Worlds, One Planet presented by Sir David Attenborough and third-party commissions for Discovery, Apple, Quibi, National Geographic and BBC America. 

The Natural History Unit is part of BBC Studios, a subsidiary of the BBC, which develops, produces and distributes bold, British content, making over 2,500 hours of content each year, operating in 22 markets globally and generating revenue of around £1.4bn. In the year to March 2019, it returned £243m to the BBC Group, complementing the BBC’s licence fee and enhancing programmes for UK audiences.

As US and European governments grapple with the challenges of reinforcing their economic relationships, traditional negotiations over tax and trade policy may soon be overwhelmed by a far thornier issue: the regulation of data storage, protection and analysis. As traditional global trade in goods and services has levelled off, cross-border data flows continue to expand rapidly.

Christopher Smart will outline the economic promise of data analytics to drive dramatic productivity gains, particularly for industry and financial services. He will explore contrasting political debates in the United States and Europe over personal privacy and national security and analyse how these have influenced many of the assumptions that drive the regulation of data flows. 

This event is open to coporate members only.

This event will be preceded by an informal, welcome reception from 12:15.

To enable as open a debate as possible, this event will be held under the Chatham House Rule. 

Summary

• As the US government and European governments once again grapple with the challenges of reinforcing and expanding the transatlantic economic relationship, traditional negotiations over trade or tax policy may soon be upstaged by a far thornier and more important issue: how to regulate the storage, protection and analysis of data.
• Growth in the traditional global trade in goods and services has levelled off, but cross-border data flows continue to expand rapidly and the challenges of developing policies that protect privacy, security and innovation are already tremendous. For example, data analytics are driving dramatic productivity gains in industry, particularly for large and complex installations whose safety and efficiency will increasingly depend on flows of data across jurisdictions. Meanwhile, ‘fintech’ (financial technology) start-ups and large banks alike are testing new modes of accumulating, analysing and deploying customer data to provide less expensive services and manage the risk profile of their businesses.
• While the US debate on the use of data has often been framed around the trade-off between national security and personal privacy, Europeans often face an even more complex set of concerns that include worries that their digital and technology firms lag behind dominant US competitors. The political and regulatory uncertainty helps neither side, and leaves transatlantic companies struggling to comply with uncertain and conflicting rules in different jurisdictions.
• A global consensus on data regulation is currently well out of reach, but given the expanding importance of data in so many areas, basic agreement on regulatory principles is crucial between the US and the EU. This paper proposes a ‘Transatlantic Charter for Data Security and Mobility’, which could help shape a common understanding. While it would hardly resolve all concerns – or indeed contradictions – around the prevailing traditions on both sides of the Atlantic, it could provide the basis for better cooperation and establish a framework to protect the promise of the digital age amid an unpredictable and emotional debate.

Megan Greene will join us for a discussion on the prospect of future economic and political uncertainty on both sides of the Atlantic.

The first year of Donald Trump’s presidency and the ongoing saga of Brexit negotiations underscore the amount of uncertainty about the economic future on both sides of the Atlantic.

Despite that, business and consumer confidence in the US and continental Europe have soared. Are we still stuck in secular stagnation, or are we breaking out of the low growth, low inflation, low rate environment we’ve been in for years?

What opportunities and risks are posed by this year’s elections in France and Germany, the upcoming elections in Italy, and the mid-term elections in the US?

This event is part of the US and Americas Programme ongoing series on Transatlantic Perspectives on Common Economic Challenges. This series examines some of the principal global challenges that we face today and potentially differing perspectives from across Europe and the US.

Attendance at this event is by invitation only.