Dáil debates

Tuesday, 17 September 2019

Ceisteanna - Questions

Cyber Security Policy

4:25 pm

Photo of Leo VaradkarLeo Varadkar (Dublin West, Fine Gael) | Oireachtas source

Cybersecurity is not a new concept, nor are the threats associated with it.

However, digital technology now encompasses so many aspects of our day-to-day lives that anything which could disrupt our use of these technologies must be taken more seriously than may have been necessary a few years ago.

This is reflected in the sixth national risk assessment, which was published earlier this year, in which the significance of the risk associated with cybersecurity has been increased since last year.

The introduction of the general data protection regulation a little over a year ago also requires that personal data is "processed in a manner that ensures appropriate security of the personal data".

As is common to many types of business, regardless of their size or the industry within which they operate, my Department is hugely reliant on its information and communications systems. These underpin much of our work.

When IT systems are being designed or considered for use in the Department of the Taoiseach, they are designed and considered in the context of minimising any interruption to the service which they will provide.

This is with a view towards business continuity, disaster recovery and the security of the system.

My Department works with several suppliers that specialise in the areas of cybersecurity and information security. There is also ongoing contact with the computer security incident response team in the National Cyber Security Centre, which provides regular guidance and advice relating to current Internet security alerts and threats.

Preventative measures recommended by the response team are taken seriously and are reviewed when they are received with appropriate action then being taken.

Cybersecurity should not be seen as solely a technical discipline. Building resilience to cyber-based attacks continues to be a challenge for businesses, individuals, the public sector, and society in general.

My Department provides advice and guidance to all staff on reasonably common cybersecurity threats such as phishing and ransomware which may be received through email or through other digital channels.

This is intended to offer guidance while in work but can be applied equally at home where digital technologies and Internet-connected devices can be just as common, if not more common.

The response to cyber threats continues to be a whole-of-Government challenge with the Department of Communications, Climate Action and Environment leading on the development of a new national cybersecurity strategy. A public consultation took place recently on the development of the new strategy, which will seek to take account of heightened threats, new responsibilities and the need to develop new skills and wider engagement internationally.

Comments

No comments

Log in or join to post a public comment.