I propose to take Questions Nos. 236 to 238, inclusive, together.
The Government fully recognises the critical importance of protecting the State against cyber security threats and has invested heavily in recent years in strengthening the State’s capacity in this area. This has included the significant development and growth of the National Cyber Security Centre (NCSC). The response team within the NCSC gained international accreditation in 2017.
The NCSC works with An Garda Síochána, the Defence Forces and other Departments and State Agencies in relation to the security of IT infrastructure and critical national infrastructure. The operational details of these activities are not made public for security reasons
Moreover, since the transposition of the EU Network and Information Security Directive last year, the NCSC has a series of formal powers around the security of a range of critical national infrastructure, including a set of binding security requirements and an incident reporting requirement.
My Department is leading in the development of a new National Cyber Security Strategy and chairs a Steering Group with representation across a number of Government Departments. A public consultation on the Strategy was launched on 19 March 2019 and will remain open until 1 May. This public consultation poses a series of questions around how we might better (1) protect critical national Infrastructure and services from Cyber Security related risks, (2) develop our skills base and industrial capacity in this field, and (3) engage nationally and internationally on cyber security matters, both to build awareness and to ensure that our international policy position takes cognisance of developments in cyber security. My Department has also established 5 expert stakeholder groups to comment on the various aspects of cyber security policy to ensure that the Strategy process is fully informed by a mix of public, private sector and academic expertise. These groups have already met once, and will meet again after the public consultation phase is completed. The new strategy will be in place mid-year.