Dáil Éireann Debate, Tuesday - 18 October 2022
164. Deputy John Lahart asked the Tánaiste and Minister for Enterprise, Trade and Employment the total spend by his Department and the agencies under his remit on cybersecurity measures since 2019 to date in 2022; and if he will make a statement on the matter. [51170/22]
View answerMy Department adopts a defence in depth approach to cyber security. This approach uses multiple layers and disparate systems to deliver security which is not dependent on any single component. Given the heightened level of cyber risk which has pertained in recent times, my Department’s technical staff has adopted a posture of increased vigilance and oversight of systems.
My Department takes advice from its own external security advisers, and monitors advice and guidance coming from the National Cyber Security Centre (NCSC) on any additional steps which should be implemented in the light of current risks.
For operational and security reasons, we are advised by the NCSC not to disclose details of systems and processes which could in any way compromise those efforts. In particular, it is not considered appropriate to disclose information which might assist criminals to identify potential vulnerabilities in departmental cybersecurity arrangements, or to allow those criminals to enumerate differences in approach between public bodies which could be used to identify targets.
Therefore, it is not considered appropriate to disclose particular arrangements in place in relation to cyber security tools and services, or financial details which could be used to rank the cyber defences of public bodies, and my Department does not comment on operational security matters.
The cybersecurity measures deployed and related spend by agencies under the remit of my Department is a day-to-day operational matter for those agencies and not one in which I have a direct function.
