For starters, governments and industry must treat nuclear security as a process of continuous improvement and work to keep pace with evolving threats and challenges. A facility considered secure 20 years ago might now be vulnerable to a cyber attack that bypasses its security systems or confounds efforts to keep track of its nuclear material.