Mr. Brian Honan:

As with any journey, how long it takes to get there depends on where you start from. Any firms that have not prepared for NIS2 are going to get a shock. They are going to struggle to meet the requirements. Those that have already been prepared for NIS2 and are getting there will, hopefully, have had those costs spread out already. We are going to see an increase in costs on firms to meet the requirements.

The Government could look at providing grants or some sort of supports for firms to improve their cybersecurity. We provide our personal data and we rely on so many organisations to keep the lights on, keep our communications going and keep our society and economy going. If those firms do not have the appropriate security, it could interrupt the benefits that we have. It is appropriate to give them the supports they need to get there. It is perhaps similar to the climate action plans where homeowners and businesses were given SEAI grants to meet certain levels. A similar scheme could be devised from a cybersecurity point of view.