Mr. Mark Griffin:

The role of the National Cyber Security Centre, NCSC, is to monitor operators of essential services in the health, transport, water, and financial services, with the area of financial services delegated to the Central Bank. NCSC regulations set out what the roles are in terms of the entities maintaining their cyber posture at a sufficient standard and making sure controls and necessary cyber protections are in place.

I had a quick glance at chapter 12 of the Comptroller and Auditor General's report. The HSE acknowledged there were still a substantial number of pieces of IT infrastructure that were out of warranty, but that special arrangements were put in place to patch them and make them fit for purpose and that the necessary cybersecurity controls were in place to identify whether there were any incidents or vulnerabilities so that effective action could be taken.