Dr. Richard Browne:

I will start with the last question first, if the Chairman does not mind. Could it happen again? Potentially, but I very much doubt it now, given what the HSE has put in place since the incident. When the incident occurred, we brought in the world's biggest external incident response company. The fundamental issue is that the HSE network is huge.

Agents were put on all the machines and every endpoint on the HSE network is being watched extremely carefully so that type of incident will not happen again. That does not mean a different type will not happen but it is what it is.

As to how the incident occurred, very simply an individual device - a laptop - was compromised. That laptop remained compromised for seven weeks and then, eight days before the incident, the attackers broke out of that laptop and started exploring around the HSE network and extracting a limited amount of data from the HSE network.