This paper sets out a roadmap for how organisations in the civil nuclear sector can explore their options and review their cyber risk exposure.