Ms Jenny Fisher:

I am happy to take that. When we think about cybersecurity, in particular the NIS2 regulations we are required to comply with, we think about it in two ways. First, like all businesses, we are really focused on the information and cybersecurity side of things. The second concerns network availability and security. From a corporate point of view, we have a very comprehensive information security programme and ISO certification. Therefore, we have great confidence that the systems we have in place are protecting us.

In terms of our infrastructure, we are the pipe. The data travelling along the pipe cannot be attacked through our broader system. We think about the system’s security and availability in terms of both prevention and cure. Prevention includes what Mr. Malone and Ms Meyer have talked about, including the structure and design of the network. It is a case of having the rings so there is alternative routing if there is a break and of ensuring our exchanges are located in areas that are robust away from flood plains, etc. The cure side is about having all the responsiveness Ms Meyer has described, including through teams who can respond quickly and diligently to an event wherever it occurs.