An Office for Nuclear Regulation (ONR) cyber security and information assurance inspector has been selected as a World Institute for Nuclear Security (WINS) Academy Ambassador.
Sheridan Morris will use his 20 years of experience in security risk management, spanning law enforcement, national security, and safeguarding critical national infrastructure, to promote WINS to ONR colleagues and the wider UK nuclear sector.
The WINS Academy offers international certification for nuclear security management and radioactive source security management.
Its ambassadors are advocates for nuclear security, raising the profile of nuclear and radioactive source security and advancing the role's professional certification to strengthen security culture across the globe.
ONR maintains a close partnership with industry to encourage ongoing improvements in cyber security. Through regular engagement with dutyholders, the regulator stresses the importance of sustained investment in cyber security measures to safeguard against a constantly evolving threat environment.
Sheridan said: "Artificial intelligence is certainly the most discussed development at the moment, offering potential contributions to enhance security but also introducing fresh risks from malicious actors, as well as an operational platform that could potentially be compromised.
"Ultimately, by robustly applying proven security principles - which are championed by regulators and national infrastructure authorities - we can effectively manage new technologies."
As technology advances, there is growing need within the nuclear sector to bring together IT and operational technology systems to improve outcomes and minimise risk.
ONR has introduced thematic interventions that set out clear expectations in this space, supported by specialist inspectors and cyber security consultancy partners.
Sheridan added: “Promoting a strong cyber security culture remains vital, even within a highly-regulated environment.
“The foundations are well established - clear, accessible policies and practices, reinforced by regular training and visible leadership.
“A non-blame culture is important, encouraging people to report incidents and mistakes so an organisation can learn and improve.
“It’s essential to constantly remind that responsibility for security lies with the dutyholder, but regulators need to create positive relationships to ensure dutyholders report issues to fulfil their legal obligations.
“Technical skills are important, but effective security professionals need ’inspector craft’ - a blend of legal, business, administrative, and people skills.”
The WINS training takes a holistic approach, covering physical, cyber, and personnel security while considering nuclear regulatory and business drivers.
Sheridan begins his three-year term as WINS Academy Ambassador this month, joined by fellow ONR security inspector, Jamie Daniels, who is starting his second term.