Mr. Brian Honan:

The crux of the Bill is that it is trying to ensure the organisations that will be regulated are meeting a minimal level of cybersecurity requirements. Deputy Matthews mentioned risk. It is to ensure organisations are taking a risk-based approach to their security. There is no such thing as 100% security either in the cyberworld or the real world, so people have to take a risk-based approach. That is what the Bill is proposing that organisations will do. They will take a risk-based approach, look at their environment, understand the risks they face as a business or organisation, and then put in the appropriate security controls to manage those risks.