Oireachtas Joint and Select Committees
Wednesday, 15 December 2021
Joint Oireachtas Committee on Jobs, Enterprise and Innovation
Companies Registration Office: Discussion
Dr. David McFadden:
I think the last question concerned cyberware attacks. We are all very cognisant of this issue, to say the least. We spent the last several years upgrading our systems. We have introduced a whole new platform on which companies' information is present. It is an issue that we are mindful of. It must be borne in mind, of course, that most of the information we have is intended for public use anyway. The idea is that people dealing with companies, be they consumers, other businesses, such as lending institutions, lawyers, accountants and people doing due diligence, need to have this information on the companies and those involved in running the companies. Therefore, the data we have is almost entirely information that is available to the public in any event.
This is, however, a valid point. We have had to take great care to ensure that a cyberattack would not take our systems down or take them out, because that would have a detrimental effect on business. We have backup systems whereby at the end of each day our systems are backed up. There is also a fallback system up and running, where we can go back to the information we had as of the previous day. That contingency would not mean that we would not be affected by a cyberattack, but it would ensure that we have backup systems in place. We must also take great care when planning the future use of PPSN numbers. That is a little bit ahead, but a great deal of planning is required to ensure we are taking great care to ascertain that the information is protected. It will be done through a system that will involve the Department of Social Protection, but we are cognisant of the inherent dangers if that information were not protected.
Therefore, I am not going to say that everything is absolutely guaranteed in this respect, but we are very cognisant that we must take great care to ensure that our systems can withstand attacks, that we have backups if they are attacked and that we try to do what we can to ensure the security of the information. Regarding the query about the specifics concerning PPSNs, that information will be given to us at a future point. I am not sure if I have answered the question.
No comments