Steven Matthews (Wicklow, Green Party) | Oireachtas source

I will not even go into AI because I have not even attempted to try to understand it. Sometimes I reach a point where I ask if I really need to know a technology as I have enough in my life at this stage.

I know I am taking up a bit of time but I want to expand on one point. We talk about designers, installers and so on, and we could certify them and have a level and a standard for that. However, the users can be very much the weak point. I did a survey recently on how cybersecure I am. It was one of these multiple-choice surveys where two of the answers are obviously wrong, one is partially right and the other is dead right. It mentioned a cybersecurity bulletin that we get sent every quarter and it asked whether you read it or skim-read it. Obviously, I skim-read it, if I read it at all. I am putting this in the context of something like a fire drill in a building, which is a practical application of what we do in a fire situation and although it is controlled, we can see how people react. Is it possible to randomly test people or, in other words, have a controlled cybertest?

I get a lot of emails and I am very conscious of opening attachments. I sometimes get emails with attachments from constituents who I do not know and I do not open the attachment or am cautious about that. I will open attachments from trusted people who I have received attachments from before, such as those in Departments and so on. Within industry, in order to test people, would it be possible to send them some sort of cyber-risk scenario, see how they react to it and then tell them the risk they had run? Rather than sending someone a bulletin saying “Don't do this” or “Don't do that”, putting them in a scenario where they get caught out might mean they are glad they had the test. Is there something like that out there?