Pakistan has established ‘robust’ nuclear security regime, says IAEA after review

1. At a Glance

• The International Atomic Energy Agency (IAEA) has said that Pakistan has a "robust nuclear security regime" for the physical protection of nuclear material and facilities. It said so after its first-ever IPPAS mission to Pakistan. [1]
• IPPAS = International Physical Protection Advisory Service. It is an IAEA peer-review service. It runs only when the host state asks for it, and it assesses a state's legislative and regulatory framework and the physical protection at its facilities. [1]
• Why it matters for UPSC: it covers India's neighbourhood security, international scrutiny of Pakistan's nuclear assets, and the global nuclear security system (IAEA, CPPNM, NSS). It also sets up a comparison with India's own IPPAS experience.

2. Why in the News

• A seven-member IAEA team finished a 12-day IPPAS mission to Pakistan, held from 28 September to 9 October 2026. [1]
• The mission was held at the request of the Pakistani government and hosted by the Pakistan Nuclear Regulatory Authority (PNRA). [1]
• The IAEA's conclusion: the regime "was observed to be appropriately implemented at the facility visited". [1]

3. Background & Evolution

• Pakistan's first nuclear power plant: KANUPP, a CANDU (Canadian Deuterium Uranium) reactor in Karachi. It began operating in 1971 and was later permanently shut down. It is now being decommissioned. [1]
• Global framework milestones (unverified):
• The IAEA was set up in 1957.
• The Convention on the Physical Protection of Nuclear Material (CPPNM) was adopted in 1980 and entered into force in 1987.
• IAEA launched IPPAS in 1995/96.
• The CPPNM Amendment was adopted in 2005 and entered into force in 2016. It extended coverage to domestic use, storage and transport, and to nuclear facilities.

• The Nuclear Security Summits ran from 2010 to 2016.

• India's precedent (unverified): India hosted an IPPAS mission in 2023.

4. Core Static Facts

Item	Fact
Reviewing body	IAEA, under its IPPAS service [1]
Nature of mission	Advisory peer review; request-based, not an inspection [1]
Team size / duration	7 members / 12 days [1]
Dates	28 Sep – 9 Oct 2026 [1]
Host agency	Pakistan Nuclear Regulatory Authority (PNRA) [1]
Other stakeholders met	Pakistan Atomic Energy Commission (PAEC) and others [1]
What was reviewed	(i) Legislative and regulatory framework for nuclear security; (ii) physical protection measures at one nuclear facility [1]
Site visited	KANUPP Decommissioning Project, Karachi Nuclear Power Generating Station [1]
KANUPP reactor type	CANDU (pressurised heavy water); operating from 1971 [1]
Key IAEA observations	Regime is "robust"; it is improved through periodic reviews; Pakistan's capacity-building infrastructure adds to nuclear security expertise nationally, regionally and internationally [1]

• Physical protection is about stopping theft or unauthorised removal of nuclear material and sabotage of facilities. It is different from safeguards, which check that material is not diverted to weapons. It is also different from safety, which deals with accident prevention and radiation protection. (unverified, standard IAEA usage)

5. Multi-Dimensional Analysis

Geopolitical / Strategic

• The IAEA endorsement helps Pakistan push back against long-standing worries about the security of its nuclear assets. It may also support Pakistan's bid for NSG membership and civil nuclear cooperation. [S1 for the endorsement; the rest is analysis]
• The review covered only one facility, a civilian plant being decommissioned. Pakistan's military nuclear programme sits outside IAEA reach, so the finding is narrow. [S1 for the scope]
• India–Pakistan angle: both are non-NPT nuclear-weapon states that have now invited IPPAS reviews (India's is unverified). This gives an opening for nuclear CBMs.

Legal / Institutional

• The review tested Pakistan's legislative and regulatory framework, with the PNRA acting as the independent regulator. [1]
• Regulatory independence is a core IAEA norm. Compare India's AERB, which still lacks a statutory basis (unverified).

Governance / Transparency

• Request-based peer reviews signal voluntary transparency, but the reports are confidential (unverified). Outsiders therefore cannot fully verify the findings.
• The IAEA noted "periodic reviews" as a sign of a self-correcting regime. [1]

Scientific / Technological

• Decommissioning a CANDU reactor raises its own security problems: spent fuel, heavy water and radioactive waste in transit and storage. [S1 for the CANDU and decommissioning context]

Security (internal)

• Physical protection is central to nuclear terrorism risks and insider threats. This is especially relevant given militancy in Pakistan.

6. Recent Developments (last 12–18 months)

• 28 Sep – 9 Oct 2026: Pakistan's first IPPAS mission is held, hosted by the PNRA. [1]
• 9 Oct 2026 (Friday): The mission ends, and the IAEA describes Pakistan's regime as "robust". [1]
• 11 Oct 2026: The Hindu (Chennai edition, p. 21) carries the PTI report from Islamabad. [1]

7. Prelims Hooks

• IPPAS stands for International Physical Protection Advisory Service, run by the IAEA. [1]
• IPPAS missions take place at the request of the host government. [1]
• The 2026 mission was Pakistan's first IPPAS mission. [1]
• The team had 7 members and the mission lasted 12 days. [1]
• Pakistan's host agency was the Pakistan Nuclear Regulatory Authority (PNRA). [1]
• The team also met the Pakistan Atomic Energy Commission (PAEC). [1]
• The site visited was the KANUPP Decommissioning Project, Karachi. [1]
• KANUPP was Pakistan's first nuclear power plant. [1]
• KANUPP's reactor type was CANDU (Canadian Deuterium Uranium). [1]
• KANUPP began operating in 1971. [1]
• IPPAS reviews a state's legislative and regulatory framework plus the physical protection at its facilities. [1]
• The CPPNM Amendment entered into force in 2016 (unverified).
• The IAEA was set up in 1957 and has its headquarters in Vienna (unverified).

8. What the Word 'Robust' Does and Does Not Prove

• The IAEA looked at only one site, and it was a closed reactor
• The team checked physical protection at one place only: the KANUPP Decommissioning Project in Karachi [1].
• KANUPP is Pakistan's oldest plant. It has been shut down for good and is being taken apart [1].

• A plant that has stopped running still has fuel and waste to guard. But it is not where a state keeps its most sensitive material, and that material was not tested here.

• Pakistan asked for the review, so Pakistan decided when it happened

• IPPAS runs only when the host government requests it [1].
• So it is advisory peer review (experts from other countries giving advice), not an inspection that can happen without the host's consent.

• The finding is real, but it covers only what Pakistan opened to the team.

• Note the exact wording the IAEA chose

• The regime was "appropriately implemented at the facility visited" [1].
• That is a statement about one site. It is not a judgement on the whole country.

• In Mains, quote this phrase. It shows the examiner you know exactly how far the finding goes.

• The weapons programme is still outside the review

• The UN Security Council condemned the nuclear tests India and Pakistan carried out in 1998 [7].
• Neither country signed the NPT afterwards, so neither has to put its military sites under IAEA review.
• Pakistan's "robust" rating therefore says nothing about how its warheads or military fuel are guarded.

9. The Best Argument for Taking the Verdict Seriously

• The case for Pakistan, put at its strongest
• Pakistan has long told the UN that it took an active part in the Nuclear Security Summit process [3].
• It says it runs a centre of excellence that trains people from the region and beyond in nuclear security [3].
• It also says it has placed radiation detectors at several border entry and exit points to stop nuclear smuggling [3].

• The IAEA's praise for Pakistan's capacity-building infrastructure (its training set-up) matches these claims [1].

• What this argument gets right

• A state that invites outside experts takes a real risk. A bad report would hurt it.
• Training centres and border detectors are concrete steps that can be checked, not just promises.

• So the verdict should not be called propaganda. For civilian sites, it is real evidence.

• Where the argument stops

• Most of the praise matches what Pakistan has said about itself for over a decade [3]. The new mission confirmed it at one closed plant [1]. It did not test any new ground.
• The biggest worry about nuclear terrorism is an insider at a sensitive site helping outsiders. A review of one site being taken apart cannot test that across the system.
• Fair conclusion: "robust for civilian physical protection, at the site seen". Not "Pakistan's nuclear assets are safe".

10. India's Own Weak Spot: A Regulator Set Up Without a Law

• India has signed the same treaties as the strongest states
• India is a party to the CPPNM (Convention on the Physical Protection of Nuclear Material). It has ratified the 2005 Amendment, which extended the treaty to domestic use, storage and transport [2].

• India is also a party to ICSANT (the UN treaty against nuclear terrorism) [2].

• For decades, though, India's regulator stood on a government order, not a law

• The AERB (Atomic Energy Regulatory Board) was set up by a notification (an executive order), not by an Act of Parliament [4].
• So the DAE (Department of Atomic Energy) could change the AERB's powers by its own orders [4].

• The problem: the DAE also runs India's nuclear plants. The body being checked had control over the body doing the checking.

• The first attempt to fix this failed

• The Nuclear Safety Regulatory Authority Bill, 2011 was brought in after Fukushima to make the regulator independent in law [4].
• It would have created a statutory NSRA, overseen by a Nuclear Safety Council [4].

• It never became law.

• This changes a point in the existing note

• The SHANTI Bill, 2025 gives the AERB statutory recognition (a legal footing in an Act) [5].
• A later reply in Parliament calls it the SHANTI Act [6].
• So the note's line that the AERB "still lacks a statutory basis" is out of date. Write instead that AERB now has a legal base, and the open question is how independent it is in practice.

11. How India Should Respond

• MEA: point to the limits of the finding, without attacking the IAEA
• Attacking the IAEA would make India look like it opposes a body it relies on.

• The stronger line is the IAEA's own wording: one site, "at the facility visited" [1].

• DAE and AERB: use SHANTI to show independence in practice

• A legal base alone does not make a regulator independent [5].
• The 2011 Bill planned a separate Nuclear Safety Council to oversee the regulator [4]. Rules under the new law could bring back that idea of a check that sits outside the DAE.

• This would let India make the same claim as Pakistan's PNRA, an independent regulator, on firmer ground.

• India: keep its treaty record in the front window

• India's membership of the CPPNM Amendment and ICSANT [2] is its best answer in debates over who is a "responsible" nuclear state, such as NSG (Nuclear Suppliers Group) membership.
• India's diplomats should keep repeating this record, so Pakistan's single civilian review is not treated as equal to it.

12. Anchors for Answers

• Data: IAEA team of 7 members, 12-day mission, 1 facility visited (KANUPP, being decommissioned) [1]
• Report/Committee: Nuclear Safety Regulatory Authority Bill, 2011, which lapsed. It proposed a statutory NSRA overseen by a Nuclear Safety Council [4]
• Law/Case: SHANTI Bill/Act, 2025, which gives AERB statutory recognition [5][6]; India is a party to the CPPNM 2005 Amendment and ICSANT [2]; UNSC condemnation of the 1998 India–Pakistan nuclear tests [7]
• Comparison: Pakistan's PNRA was the regulator that hosted the mission [1], while India's AERB was set up by executive notification and its powers could be changed by the DAE [4]

13. Mains Relevance

• GS-II: India and its neighbourhood; important international institutions (IAEA).
• GS-III: Security challenges; science and technology (nuclear energy).
• Possible question stems: 1. "International peer reviews of nuclear security, such as the IAEA's IPPAS, increase transparency but have limited reach over military programmes." Critically examine this with reference to South Asia. 2. Distinguish between nuclear safety, security and safeguards. How does the global nuclear security architecture deal with the risk of nuclear terrorism? 3. Discuss what the IAEA's assessment of Pakistan's nuclear security regime means for India's strategic and diplomatic position.

14. Related Topics to Study Next

• IAEA: structure, safeguards, Additional Protocol. This is the parent body and gives the safeguards-versus-security distinction.
• CPPNM and its 2005 Amendment. This is the legal treaty base for physical protection.
• ICSANT (2005). This is the UN convention against nuclear terrorism and complements the CPPNM.
• Nuclear Security Summits and UNSC Resolution 1540. These are the high-level political track on non-state-actor proliferation.
• NSG membership: India vs Pakistan. Nuclear credentials feed into membership bids.
• India's nuclear regulator (AERB) and the nuclear liability law (CLNDA 2010). These allow comparison with India's regulatory independence.
• India's IPPAS mission (2023). This gives a direct comparison.
• India–Pakistan Agreement on Prohibition of Attacks on Nuclear Installations (1988). This is a bilateral nuclear CBM; the two countries exchange lists every 1 January.

15. NCERT Concepts to Revise

• Nuclear Suppliers Group (Polity): Note links Pakistan's nuclear credentials to NSG membership bids, which India also seeks; India got only a 2008 waiver.
• Nuclear Non-Proliferation Treaty (Polity): India and Pakistan are non-NPT nuclear states, so IAEA reviews like IPPAS are voluntary rather than treaty-bound.
• Regulatory body (Polity): The review tested the independent regulator PNRA; regulatory independence, compared with India's AERB, is a core theme.
• Nuclear energy (Geography): KANUPP is a nuclear power plant; this gives the background on reactors and India's own programme.
• Transparency (Polity): Voluntary peer reviews signal openness, but confidential reports limit outside verification of the findings.

16. Common Errors / Trap Areas

• IPPAS is not a safeguards inspection. It is an advisory peer review done at the host's request and does not verify non-diversion. [1]
• PNRA and PAEC are different bodies. The PNRA is the regulator and hosted the mission; the PAEC is the operator/promoter. [1]
• KANUPP is not Chashma. KANUPP is the Karachi CANDU plant from 1971, while the Chashma units (C-1 to C-4) are Chinese-built (unverified). [1]
• "Robust" applies only to physical protection of civilian material and facilities, and only one facility was visited. It is not a verdict on Pakistan's weapons arsenal. [1]
• Do not confuse CPPNM (1980) with ICSANT (2005). The second is a separate UN treaty (unverified).