A nuclear reactor protection system, comprising: a plurality of functionally independent modules (2104a-2104d), each of the modules (2104a-2104d) configured to receive a plurality of inputs from a plurality of sensors of a nuclear reactor safety system, and logically determine a safety action based at least in part on the plurality of inputs, each of the functionally independent modules (2104a-2104d) comprising a digital module or a combination digital and analog module; an analog module electrically coupled to one or more of the functionally independent modules; and one or more nuclear reactor safety actuators communicably coupled to the plurality of functionally independent modules (2104a-2104d) to receive the safety action determination based at least in part on the plurality of inputs; wherein the analog module comprises a first analog module, characterised in that the nuclear reactor protection system further comprises: a second analog module; an engineered safety features actuation system, ESFAS, wherein a first subset of the plurality of functionally independent modules receive a plurality of ESFAS inputs and logically determine an ESFAS (14 8) component actuation based at least in part on the ESFAS inputs, and wherein the first analog module is electrically coupled to the functionally independent modules (2104a-2104d) of the first subset of the plurality of functionally independent modules (2104a-2104d); and a reactor trip system, RTS, wherein a second subset of the plurality of functionally independent modules (2104a-2104d) receive a plurality of RTS inputs and logically determine an RTS component actuation based at least in part on the RTS inputs, and wherein the second analog module is electrically coupled to the functionally independent modules (2104a-2104d) of the second subset of the plurality of functionally independent modules (2104a-2104d). a plurality of functionally independent modules (2104a-2104d), each of the modules (2104a-2104d) configured to receive a plurality of inputs from a plurality of sensors of a nuclear reactor safety system, and logically determine a safety action based at least in part on the plurality of inputs, each of the functionally independent modules (2104a-2104d) comprising a digital module or a combination digital and analog module; an analog module electrically coupled to one or more of the functionally independent modules; and one or more nuclear reactor safety actuators communicably coupled to the plurality of functionally independent modules (2104a-2104d) to receive the safety action determination based at least in part on the plurality of inputs; wherein the analog module comprises a first analog module, characterised in that the nuclear reactor protection system further comprises: a second analog module; an engineered safety features actuation system, ESFAS, wherein a first subset of the plurality of functionally independent modules receive a plurality of ESFAS inputs and logically determine an ESFAS (14 8) component actuation based at least in part on the ESFAS inputs, and wherein the first analog module is electrically coupled to the functionally independent modules (2104a-2104d) of the first subset of the plurality of functionally independent modules (2104a-2104d); and a reactor trip system, RTS, wherein a second subset of the plurality of functionally independent modules (2104a-2104d) receive a plurality of RTS inputs and logically determine an RTS component actuation based at least in part on the RTS inputs, and wherein the second analog module is electrically coupled to the functionally independent modules (2104a-2104d) of the second subset of the plurality of functionally independent modules (2104a-2104d). a second analog module; an engineered safety features actuation system, ESFAS, wherein a first subset of the plurality of functionally independent modules receive a plurality of ESFAS inputs and logically determine an ESFAS (14 8) component actuation based at least in part on the ESFAS inputs, and wherein the first analog module is electrically coupled to the functionally independent modules (2104a-2104d) of the first subset of the plurality of functionally independent modules (2104a-2104d); and a reactor trip system, RTS, wherein a second subset of the plurality of functionally independent modules (2104a-2104d) receive a plurality of RTS inputs and logically determine an RTS component actuation based at least in part on the RTS inputs, and wherein the second analog module is electrically coupled to the functionally independent modules (2104a-2104d) of the second subset of the plurality of functionally independent modules (2104a-2104d).