Balancing Innovation and Nuclear Security for AI and IoT Technologies

Many everyday devices can connect to networks and exchange data, making them part of the Internet of Things (IoT). In industrial settings, these are known as the Industrial Internet of Things (IIoT). IIoT devices are increasingly paired with AI to automate processes and support human decision-making, with the goal of improving operational efficiency and performance. 

The nuclear industry, like other sectors, is increasingly considering adopting IIoT devices and AI to improve efficiency, reduce costs, and enhance security. However, greater reliance on these technologies in critical infrastructure, such as nuclear facilities, can also introduce new and expanded risks, particularly in cyber security and in vulnerabilities unique to AI systems. 

The expanding use of consumer IoT and publicly available AI also creates additional security challenges, as malicious actors can misuse these tools to carry out more sophisticated cyber attacks, social-engineering campaigns, and data manipulation. 

The latest VCDNP report by Senior Fellow Dr. Sarah Case Lackner and Research Associate Mara Zarka examines the nuclear-security risks posed by IoT and AI, how those risks can be addressed, while recognising the significant benefits these technologies may also provide. The report presents four broad recommendations for nuclear security policymakers, regulators, operators, and researchers: 

1. In highly digitalised nuclear facilities using IIoT and AI, nuclear security, especially cyber security, should prioritise reliability and resilience over the unrealistic goal of preventing every attack. 

2. Cost-benefit assessments for IIoT and AI integration should account for physical and cyber security measures needed to maintain robust nuclear security. 

3. The nuclear sector should proactively learn from other critical infrastructure sectors that are advancing more rapidly in digitisation and in the use of IIoT and AI. 

4. Up-to-date, practical guidance for operators and regulators on maintain nuclear security in a rapidly changing environment should be continuously developed and shared by international and other relevant organisations, including NGOs and industry groups. 

The report draws on insights and discussions from a workshop convened at the VCDNP on 15 and 16 October 2025 on this topic, and expert research. 

The VCDNP thanks Global Affairs Canada for their generous support of this project.