Bifurcated Compliance and the Compliance Facade Problem in the IAEA Nuclear Security Architecture

In the high-stakes world of international security, there is a persistent fear that groups outside of any government could steal radioactive materials to build a crude nuclear bomb or a device designed to spread radiation. To stop this, the global community has built a massive system of rules, treaties, and technical guides over the last two decades. This system relies on the International Atomic Energy Agency, a United Nations body, to help nations protect their nuclear materials. The logic is straightforward: if every country has strong laws and secure facilities, the risk of theft disappears. However, a new study suggests that while the world has built an impressive structure of rules, it may not be working as well as hoped. The problem is not a lack of effort, but a fundamental flaw in how the rules are written and enforced. The system is excellent at helping countries that simply lack the money or expertise to build secure facilities, but it is completely powerless against countries that have the resources but choose not to use them.

Two researchers from the National Defence University of Malaysia, Nasser Ali AlHassani and Mohd Mizan, set out to understand why this gap exists. They did not just look at the surface level of the problem; they dug into the very structure of the international agreements. They analyzed 112 different documents, ranging from binding United Nations resolutions to detailed technical manuals, and spoke with five experts who work directly in nuclear security. Their goal was to see if the system was broken by design. They found that the architecture of nuclear security is built like a three-layer cake, but the layers do not fit together. The top layer consists of the most powerful, legally binding rules that apply to every country in the world. However, these rules are written in very vague language, telling nations to have "effective laws" without defining exactly what that means. The bottom layer contains the most detailed, specific instructions on how to build a secure facility, but these instructions are not legally binding; they are merely suggestions.

This mismatch creates what the researchers call a "compliance facade." Because the most powerful rules are so vague, a country can technically follow the law by passing a generic piece of legislation that says they have a nuclear security plan, without ever actually building the secure systems described in the detailed suggestions. They can satisfy the formal requirement of the law while failing to meet the practical need for safety. The researchers found that this structure allows nations to look compliant on paper while leaving their nuclear materials vulnerable in reality. The system is designed in a way that makes it easy to pretend you are doing the right thing, but hard to prove you are actually doing it.

The study also examined how the system tries to fix these problems. It relies almost entirely on one method: assistance. The International Atomic Energy Agency sends experts to help countries build better security systems, provide training, and share technology. This approach works very well for countries that want to be safe but simply do not have the money or technical skills to do it alone. The data shows that nations like Kazakhstan and Georgia have significantly improved their security scores after receiving this help. However, the system has a blind spot. It has no way to deal with countries that have the money and the skills but simply choose not to implement the security measures for political reasons. The system lacks any mechanism to punish these countries or force them to comply. There is no court to sue them, and no way to verify their claims other than asking them to report on themselves.

This leads to a split, or "bifurcated," pattern of results. On one side, there are countries that are struggling with capacity; the system helps them, and they get better. On the other side, there are countries that are struggling with a lack of political will; the system cannot touch them, and they remain a risk. The researchers found that the gap between what countries say they are doing and what they are actually doing is sustained because there is no independent oversight to check the truth. The current system relies on countries to tell the truth about their own security, and when a country decides to hide its weaknesses, the global architecture has no tool to expose them.

To fix this, the researchers propose three practical steps that do not require rewriting the entire international legal system. First, they suggest linking the vague reporting requirements of the United Nations to the specific technical standards of the International Atomic Energy Agency. This would force countries to explain not just that they have a law, but how their security systems actually work. Second, they recommend creating a graduated system of peer reviews. Instead of a simple "yes or no" check, countries would be evaluated on a scale that increases in intensity based on their readiness, creating a path of accountability that is harder to ignore. Finally, they suggest that the International Atomic Energy Agency should share information between its different departments. Currently, the team that checks for nuclear weapons proliferation has the power to verify facts, but the team responsible for security does not. Allowing these two groups to share information would give the security team a way to verify claims without needing a new, politically difficult legal treaty.

The study concludes that the current system is trapped in a cycle where its own design prevents it from solving its biggest problems. The gap between the investment in global security and the actual safety achieved is not an accident; it is a result of a structure that prioritizes political agreement over practical enforcement. The researchers argue that while the world cannot easily force countries to change their minds through litigation, it can build a system that makes it harder for them to hide their failures. By closing the gap between formal rules and real-world performance, the international community can move from a facade of safety to a reality of security.