Jack Chambers (Dublin West, Fianna Fail)
Link to this: Individually | In context | Oireachtas source

737. To ask the Minister for Jobs, Enterprise and Innovation if there are dedicated, professionally trained and certified cybersecurity staff in relation to cybersecurity protocols under the remit of her Department; if such specialists are being recruited; if her Department maintains a risk register of security breaches; if so, if there are staff that analyse, log and maintain such a register; and if she will make a statement on the matter. [36221/19]

Heather Humphreys (Cavan-Monaghan, Fine Gael)
Link to this: Individually | In context | Oireachtas source

My Department has a dedicated, professionally trained staff member with responsibility for information and cyber security.  This role is supplemented by other staff members who have also had professional training in this area.  While staff members do not hold current certifications, their role is supplemented by fully certified external contractors specialising in cyber security as needed.   My Department is not currently recruiting cyber security specialists.

My Department maintains a register of information security incidents which require investigation and follow up. It has deployed a Security Incident and Event Management (SIEM) solution to collect logs from core Departmental systems and report on any potential anomalies.  Alerts from this system are actively monitored and reviewed and any such alerts are logged and investigated.

Jack Chambers (Dublin West, Fianna Fail)
Link to this: Individually | In context | Oireachtas source

738. To ask the Minister for Jobs, Enterprise and Innovation if her Department has a disaster recovery plan, business continuity plan and or disaster recovery sites; and if she will make a statement on the matter. [36237/19]

Heather Humphreys (Cavan-Monaghan, Fine Gael)
Link to this: Individually | In context | Oireachtas source

My Department has a business continuity plan which identifies actions to be taken to mitigate the loss of significant resources such as buildings or systems.  My Department also maintains disaster recovery procedures and protocols for computer systems to mitigate the loss of significant systems.  There are two separate data centres for Departmental systems, located in separate Departmental buildings, and data and systems are replicated between the two locations.  In the event of issues with one site, services can be switched over to the second site.