Catherine Connolly (Galway West, Independent) | Oireachtas source

I have read all that. The centre was set up in 2011. In 2014 it did a national risk assessment and in 2015 it did a strategy. The directive came in 2016 and it took up to September 2018 to implement the directive which was supposed to be implemented by May. This is what I am reading. The point I make is that there was a strategy. The witness said the strategy quickly went out of date but, at the same time, in another part of his response to the Comptroller and Auditor General, he said the NCSC was complying with the thrust of the strategy. One contradicted the other when I read it. The NCSC has a strategy that is out of the date but the witness then goes on to say it is complying with the thrust of the strategy.