The UK’s Defence Nuclear Enterprise is Critical National Infrastructure facing the same technology and supply-chain risks telecoms has already regulated for. Comparing the Astraea warhead programme to the Telecommunications (Security) Act 2021 playbook, this post argues for extending the Office for Nuclear Regulation’s existing remit rather than building a new regulatory regime.