IAEA and KINAC Boost Nuclear Cybersecurity with Advanced Global Training Course

For the first time, the training incorporated KINAC’s Nuclear Power Plant Training Equipment (NPPTE)—an advanced learning platform that replicates the core digital control systems of a real nuclear power plant.

The International Atomic Energy Agency (IAEA) and the Korea Institute of Nuclear Nonproliferation and Control (KINAC) have jointly developed a state-of-the-art training programme aimed at strengthening global resilience against cyber-attacks targeting nuclear facilities. As digital systems become increasingly embedded in nuclear operations, the programme seeks to equip experts with the skills needed to detect, prevent and respond to cyber threats that could compromise nuclear security.

The latest edition of the course was held from 17 to 28 November 2025 at KINAC’s International Nuclear Nonproliferation and Security Academy in Daejeon, Republic of Korea, bringing together 28 experts from 28 countries to share knowledge, real-world expertise and best practices in protecting critical computer-based systems.

Strengthening Global Preparedness Against Cyber Threats

Elena Buglova, Director of the IAEA’s Division of Nuclear Security, emphasised the urgency of strengthening cybersecurity within nuclear sectors:

“It's imperative that we prioritize innovation, continuous learning, and expert training on computer security as computer-based systems are now integral to nuclear security.”

She noted that the training stresses practical application, hands-on exercises and scenario-based learning—key components for building global capacity as the threat of cyber-attacks grows.

A Decade of Evolving Cybersecurity Awareness

KINAC President Na-Young Lee recalled how cybersecurity was once underestimated within nuclear security professions:

“When we began planning the first training course in 2019, many nuclear security experts underestimated the importance of cybersecurity in the nuclear industry. Over the years, we have built a solid foundation of knowledge and skills by training experts who are working to prevent, protect against, and respond to cyber-attacks.”

She added that the 2025 course reflects the latest advancements in computer security and confirms the long-term sustainability and relevance of the training programme.

Comprehensive, Hands-On Training Modules

Over a ten-day period, participants took part in:

• Threat and vulnerability analysis

• Operational technology protection

• Defensive computer security architecture

• Incident response planning and execution

• Legislative and regulatory compliance frameworks

• Vulnerability assessment and management

Interactive sessions, simulations and real-world scenarios helped participants understand both attacker methodologies and defensive countermeasures—providing a holistic picture of cybersecurity in nuclear environments.

Cutting-Edge Nuclear Power Plant Training Equipment

For the first time, the training incorporated KINAC’s Nuclear Power Plant Training Equipment (NPPTE)—an advanced learning platform that replicates the core digital control systems of a real nuclear power plant. The NPPTE includes:

• Authentic programmable logic controllers (PLCs)

• Human–machine interface (HMI) systems

• Realistic communication protocols

• Operational control system replicas

This immersive system is fully integrated with the IAEA Asherah Nuclear Power Plant Simulator, allowing participants to simulate cyber-attacks and evaluate their potential impact on nuclear facility operations.

The training also made use of the IAEA Learners platform, enhancing engagement through digital modules and interactive learning tools.

A Major Step Forward for Nuclear Cybersecurity

The IAEA–KINAC partnership underscores the growing international recognition that cybersecurity is inseparable from nuclear safety and security. As cyber threats evolve, the programme ensures that countries—regardless of size or technological capacity—can build a skilled workforce to protect nuclear infrastructure.

The training is expected to continue annually, with future iterations integrating new technologies, updated threat scenarios and expanded international collaboration.