Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear Sector

The consequences from a blended cyber-physical terrorist attack on a nuclear power plant are potentially catastrophic. Sabotage of the plant or theft and subsequent use of radiological materials can potentially lead to blackouts, deaths, and injuries and even a release of radiological materials. Thi...

Full description

Bibliographic Details
Main Authors: Debra K. Decker, Kathryn Rauhut
Format: Article
Language:English
Published: Policy Studies Organization 2022-02-01
Series:The Journal of Critical Infrastructure Policy
Subjects:
Online Access:https://www.jcip1.org/incentivizing-good-governance-beyond-regulatory-minimums.html
_version_ 1818264750231912448
author Debra K. Decker
Kathryn Rauhut
author_facet Debra K. Decker
Kathryn Rauhut
author_sort Debra K. Decker
collection DOAJ
description The consequences from a blended cyber-physical terrorist attack on a nuclear power plant are potentially catastrophic. Sabotage of the plant or theft and subsequent use of radiological materials can potentially lead to blackouts, deaths, and injuries and even a release of radiological materials. This threat continues to evolve in sophistication and complexity and is outpacing the ability and resources of governments to anticipate risks and to protect their critical infrastructure and the public from harm. Policymakers are working to keep up with the rapid onset of these threats to reinforce the resilience of critical infrastructure. Cyber vulnerabilities including insider threats are also evolving, with cyberattacks on nuclear facilities the tip of the iceberg as more sophisticated advanced persistent threats develop. This paper suggests governments look beyond regulations and policy directives to harness the power and energy of the market to incentivize operators to voluntarily adopt security measures beyond regulatory requirements. Good organizational governance is important and necessary to secure critical infrastructure including nuclear facilities and increasingly can be rewarded by the market. The definition of what is good organizational governance matters to investors, lenders, insurers, regulators, and the public. Is the organization going to be able to function effectively as an enterprise and provide a return to investors, pay back its loans, protect its workers and community, including the environment? In the nuclear field, the stakes can be high—with stakeholders depending on a stable baseload electric supply without safety or security incidents, especially of a radiological nature. This article documents findings from a multi-year project to identify incentives for nuclear security beyond regulatory minimums, with a focus on nuclear power plants. We assessed the importance of standards and developed a “Good Governance Template” to support owners/managers in obtaining benefits and reducing potential liabilities. We found that market incentives are developing in areas such as insurance, credit, and other rating systems to support the development of good governance, including incentives for companies to demonstrate due care in the management of risks, especially cyber risks. Building a business case for nuclear security based on these incentives is an important step forward in securing our nuclear future, especially in terms of cyber risks.
first_indexed 2024-12-12T19:39:52Z
format Article
id doaj.art-6fddd94b522e4eabaca2f1fdcf71d1b7
institution Directory Open Access Journal
issn 2693-3101
language English
last_indexed 2024-12-12T19:39:52Z
publishDate 2022-02-01
publisher Policy Studies Organization
record_format Article
series The Journal of Critical Infrastructure Policy
spelling doaj.art-6fddd94b522e4eabaca2f1fdcf71d1b72022-12-22T00:14:13ZengPolicy Studies OrganizationThe Journal of Critical Infrastructure Policy2693-31012022-02-012210.18278/jcip.2.2.3Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear SectorDebra K. Decker0Kathryn Rauhut1Senior Advisor, Stimson CenterNon-Resident Fellow, Stimson CenterThe consequences from a blended cyber-physical terrorist attack on a nuclear power plant are potentially catastrophic. Sabotage of the plant or theft and subsequent use of radiological materials can potentially lead to blackouts, deaths, and injuries and even a release of radiological materials. This threat continues to evolve in sophistication and complexity and is outpacing the ability and resources of governments to anticipate risks and to protect their critical infrastructure and the public from harm. Policymakers are working to keep up with the rapid onset of these threats to reinforce the resilience of critical infrastructure. Cyber vulnerabilities including insider threats are also evolving, with cyberattacks on nuclear facilities the tip of the iceberg as more sophisticated advanced persistent threats develop. This paper suggests governments look beyond regulations and policy directives to harness the power and energy of the market to incentivize operators to voluntarily adopt security measures beyond regulatory requirements. Good organizational governance is important and necessary to secure critical infrastructure including nuclear facilities and increasingly can be rewarded by the market. The definition of what is good organizational governance matters to investors, lenders, insurers, regulators, and the public. Is the organization going to be able to function effectively as an enterprise and provide a return to investors, pay back its loans, protect its workers and community, including the environment? In the nuclear field, the stakes can be high—with stakeholders depending on a stable baseload electric supply without safety or security incidents, especially of a radiological nature. This article documents findings from a multi-year project to identify incentives for nuclear security beyond regulatory minimums, with a focus on nuclear power plants. We assessed the importance of standards and developed a “Good Governance Template” to support owners/managers in obtaining benefits and reducing potential liabilities. We found that market incentives are developing in areas such as insurance, credit, and other rating systems to support the development of good governance, including incentives for companies to demonstrate due care in the management of risks, especially cyber risks. Building a business case for nuclear security based on these incentives is an important step forward in securing our nuclear future, especially in terms of cyber risks. https://www.jcip1.org/incentivizing-good-governance-beyond-regulatory-minimums.htmlgovernancenuclear securitynuclear safetynuclear powerregulationstandardsguidanceincentivesliabilitycyberinsurancecredit ratingsesg ratingssustainabilitydue care
spellingShingle Debra K. Decker
Kathryn Rauhut
Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear Sector
The Journal of Critical Infrastructure Policy
governance
nuclear security
nuclear safety
nuclear power
regulation
standards
guidance
incentives
liability
cyber
insurance
credit ratings
esg ratings
sustainability
due care
title Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear Sector
title_full Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear Sector
title_fullStr Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear Sector
title_full_unstemmed Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear Sector
title_short Incentivizing Good Governance Beyond Regulatory Minimums: The Civil Nuclear Sector
title_sort incentivizing good governance beyond regulatory minimums the civil nuclear sector
topic governance
nuclear security
nuclear safety
nuclear power
regulation
standards
guidance
incentives
liability
cyber
insurance
credit ratings
esg ratings
sustainability
due care
url https://www.jcip1.org/incentivizing-good-governance-beyond-regulatory-minimums.html
work_keys_str_mv AT debrakdecker incentivizinggoodgovernancebeyondregulatoryminimumsthecivilnuclearsector
AT kathrynrauhut incentivizinggoodgovernancebeyondregulatoryminimumsthecivilnuclearsector