Cyber security incidents can affect essential services Canadians rely on every day, including electricity and other critical infrastructure. To help prevent these risks, Canadian Nuclear Laboratories (CNL) regularly tests how organizations would respond to cyber threats.
While the Chalk River Laboratories campus operated by CNL is well known for its innovative research in clean energy, public health, and national security, its National Innovation Centre for Cyber Security in Fredericton, New Brunswick, is increasingly playing a key role in protecting critical infrastructure across Canada.
Players, controllers, evaluators and observers
It is at this facility that CNL’s Cyber Resiliency team develops and tests ways to protect nuclear facilities and other essential systems from cyber threats. Recently, the centre hosted a hands-on cyber incident response exercise using a state-of-the-art training environment that simulates a Canadian-designed nuclear reactor.
“Exercises are a proven way to strengthen an organization’s ability to respond to cyber incidents,” says Dave Trask, Principal Engineer at CNL. “They help train staff, test procedures, and ensure the right tools and decision-making processes are in place before a real incident occurs.”
Left image- Incident investigation in cyber security operations centre
Right image – Managing the process disturbance in the main control room
Left image- Incident investigation in the equipment room
Right image – Standup of cyber security incident response team
The September 2025 exercise marked the first time CNL hosted an international nuclear power plant operator for this type of activity. Participants included Romania’s national nuclear operator, Societatea Natională Nuclearelectrica S.A., which operates the Cernavodă Nuclear Power Plant. The exercise was supported through Atomic Energy of Canada Limited’s Federal Nuclear Science & Technology Work Plan.
International collaboration is increasingly important, as cyber threats often target similar systems worldwide. By working together, organizations can share lessons learned and strengthen global nuclear safety.
The exercise also welcomed observers from Canada’s federal cyber security and critical infrastructure community. These observers were able to follow the simulated incident in real time and identify opportunities to improve emergency preparedness without disrupting the exercise itself.
During the exercise, participants worked together to detect and respond to a simulated cyber incident affecting systems that support safe plant operations. The scenario required timely decision-making and coordination between cyber security specialists, engineers, and control room operators to maintain safe operations and avoid disruptions.
The exercise took place over two and a half days. The first day focused on familiarization and training. The second day involved the full incident scenario. The final half-day was dedicated to reviewing the exercise and identifying lessons learned.
Exercise observation
What makes these exercises especially valuable is their realism. Participants use real equipment and follow their own documented procedures. As one participant noted during the debrief, the experience felt very close to real-world operations.
CNL’s facilities also allow for dedicated observation spaces, enabling a wide range of stakeholders to learn from the exercise. These insights help strengthen cyber preparedness not only within participating organizations, but across Canada’s broader critical infrastructure community.
“We are proud to support organizations in strengthening their cyber resilience,” says Trask. “By continuing to work with partners in Canada and internationally, we are helping ensure that critical infrastructure remains safe and secure for the public.”
