Dr. Brendan Murphy:

I can give an example of our own. This is why there were questions about downtime and unexpected attacks. One has to build in contingency. In healthcare, it is almost like trying to put in place a solution when the train is careering down the track. We have to put in place solutions that work for the end-user but, at the same time, they have to be safe and effective, with backup plans and contingency plans for business as usual and for downtimes. We try to mitigate the risk. I happen to be the clinical risk manager, as well as the clinical neonatologist for the maternity and newborn. We have to put in risk mitigation to try to reduce the risk of harm. We try to foresee the "known unknowns" as well as, to paraphrase another committee member in the United States, the "unknown unknowns". None of us ever envisaged a complete cyberattack on our complete healthcare system. Yet, even during that awful time, we had in place the beginnings of a 24-7 system where we could at least get the immediate information available to hand in order to continue to provide care. It took us several weeks to recover, build our systems back up and try to mitigate the risk for the patients-----