Page:ISC-China.pdf/188

CHINA "we take an actor agnostic approach to making sure that industry is capable of dealing with any of the threats that it could face in the next decades and thinks about how to build that in now, but also how to ensure resilience over time."

NCSC explained that its approach is as much about considering the future intentions and capabilities of states like China, as it is about understanding its current capabilities—particularly given that these have already "changed very dramatically over time".

CPNI and NCSC contributed to an initiative *** intended to increase understanding of the risks posed *** in the nuclear industry and to identify ways to counter the threat. These include providing ongoing oversight and analysis *** in the sector, and supporting enhanced verification and oversight of companies in the nuclear supply chain. We asked about this programme and were told that the focus was not so much about strengthening personnel security controls, but "about giving us more opportunities to act *** if there is a breach of those processes".

While these 'upstream' efforts to limit the risks from Chinese investment are welcome, they are just the beginning of the process. The Intelligence Community told the Committee that ***. We were told about the process for accreditation and formulation of reactor designs before the sites go live, and MI5 explained the UK Intelligence Community's role within this process:

"***

The Office of Nuclear Regulation is [an] incredibly detailed and a powerful regulator, so we can define things ***"

While it is understandable that ***—given that Hinkley Point C is still under construction, and the remainder had not been approved at the time of writing—the finished projects must be subject to detailed (and continuing) scrutiny by the Centre for the Protection of National Infrastructure and the Intelligence Community. We expect to be kept informed of the advice provided by the Agencies and key decision timelines.

The Intelligence Community say that "the relationship between CPNI [the Centre for the Protection of National Infrastructure] and the Energy sector is already mature and the understanding of the overall level of threat is well developed". Examples of CPNI's work are as follows: