Dr. Richard Browne:

The engagement is ongoing. The nature of the incidents can vary widely. Incidents like the HSE one, for example, were extremely high-profile. Much of our work was first, managing the whole-of-government response process and second, dealing with the granular nuts and bolts of the incident itself, that is, what actually happened on the ground. This one is more distant because it has a number of incident-response companies employed. It is not a nationally-significant incident. The organisation is investigating because it saw some activity and was not entirely certain what it was. We are providing guidance, support and some analytical capability for it, which is quite normal in that kind of low-level attack.

National security incidents that might affect a Department, an agency or an entity in critical infrastructure will of course be handled directly by us and there may be no external layer.