Cyber Security Policy

Dáil Éireann Debate, Wednesday - 26 July 2017

Wednesday, 26 July 2017

Ceisteanna (1270, 1271, 1272, 1273)

James Browne

Ceist:

1270. Deputy James Browne asked the Minister for Communications, Climate Action and Environment the timeframe for the next national cyber security strategy; the period that the next strategy will cover; his plans to publish a review of the current strategy and its effectiveness; the improvements or modifications that are planned arising from the existing national cyber security strategy 2015 to 2017; the detail of the cyber security awareness activities carried out as per the current strategy document; the number of businesses, organisations and public sector bodies that have partnered with the cyber security awareness activities; and if he will make a statement on the matter. [35030/17]

James Browne

Ceist:

1271. Deputy James Browne asked the Minister for Communications, Climate Action and Environment if additional resources, training or supports have been provided to public bodies, including local authorities, arising from the high profile cyber security breaches against such organisations in 2017; his views on the level of preparedness that exists with the public sector, including the health and justice areas, to deal with such attacks; if he is satisfied that the legislation is strong enough in this area; and if he will make a statement on the matter. [35031/17]

James Browne

Ceist:

1272. Deputy James Browne asked the Minister for Communications, Climate Action and Environment the steps he has taken since taking up office to improve national cyber security awareness; the level of engagement he has with consumer, community and citizen advocacy groups on the matter; if he is satisfied with the level of preparedness that exists within crucial private sector organisations; and if he will make a statement on the matter. [35032/17]

James Browne

Ceist:

1273. Deputy James Browne asked the Minister for Communications, Climate Action and Environment his legislative priorities in the area of cyber security and awareness; if he has engaged with his European ministerial colleagues on these matters; his views on the increased proliferation of cyber security attacks; his plans for a pan European response to these issues; and if he will make a statement on the matter. [35033/17]

Freagraí scríofa

Minister of State at the Department of Communications, Climate Action and Environment

I propose to take Questions Nos. 1270 to 1273, inclusive, together.

The National Cyber Strategy set out the priorities for the National Cyber Security Centre (NCSC) for the period 2015-2017, as the protection of Government ICT Infrastructure while building capacity in other areas, including, particularly, the protection of critical national infrastructure. While the 2016 EU Network and Information Security (NIS) Directive was largely anticipated in the Strategy, the finalised Directive contains additional provisions which will have significant implications for my Department also.

The NCSC is presently engaged in a series of activities supporting Departments and agencies in the protection of their networks and infrastructure. These measures include monitoring threats, developing appropriate responses, and informing constituents of these on an ongoing basis. The NIS Directive requires Member States to take measures to protect critical national infrastructure and ensure the security of Digital Service Providers. As such, the legislation that will be used to transpose this Directive will set out the means that will be used to improve the protection of critical national infrastructure, and the NCSC is already well advanced in identifying the actual infrastructure involved and developing these measures in a practical way.

The dynamic nature of this issue, and the risks posed to citizens and the State, are clearly significant. The NCSC is presently undergoing expansion, both in terms of staffing numbers and funding. While the precise resourcing and staffing of the NCSC are security sensitive issues and are not published, it can be said that the NCSC has just finished a recruitment process at two separate grades, with a number of additional staff either in clearance or already in place.

The provision of public awareness campaigns and material for businesses and individuals will be a central component of the next National Cyber Security Strategy, and work has already commenced on a number of elements of a campaign. It is hoped that the programme for Small and Medium Enterprises will launch early next year.