National Cyber Security Centre publishes Ireland's National Cyber Emergency Plan
From Department of the Environment, Climate and Communications
Published on
Last updated on
From Department of the Environment, Climate and Communications
Published on
Last updated on
Today sees the publication of Ireland's National Cyber Emergency Plan (NCEP), developed following extensive engagement throughout both the public and private sectors and two sector-specific emergency exercises in 2022 and 2023, as well as lessons learned from the HSE ransomware attack in 2021.
The plan outlines the process by which a National Cyber Emergency is declared, managed and co-ordinated. It ensures that everyone understands their roles and responsibilities during a cyber emergency, and that the government's approach to serious cyber incidents is clearly explained and communicated to the public.
Cyber security incidents are diverse by their nature and, as such, there are a vast range of potential scenarios where the plan may be initiated. This, in turn, has ensured that a very flexible response process has been in-built during its development.
The activities described in the NCEP rely upon three co-operation modes:
Speaking on the publication on the plan, the NCSC Director Richard Browne said:
"Responding to cyber security emergencies effectively at a national level is a complex undertaking due to the very wide range of potential incidents, and the diverse nature, extent and consequences associated with these. This plan establishes an architecture for coordinating the government response in accordance with Irish and European legislation and policy.”
The primary audience for the plan are officials from government departments/agencies who have a role in the response to national cyber emergencies and potential victim organisations (providers of essential public and private services), including but not limited to senior officials, communications staff, and personnel who have responsibilities relating to incident response within their organisation.
The publication of the plan ensures seamless co-ordination with the national approach to emergency management as established in the 'Strategic Emergency Management (SEM) National Structures and Framework'. This framework is designed to enhance the protection, support, and welfare of the public in times of emergency by ensuring that fit-for-purpose national structures and procedures are in place to deal with a broad spectrum of emergencies, whether of internal or external origin.
As the plan has been developed in alignment with the Strategic Emergency Management National Structure and Framework, it establishes the structures for co-ordinating a "whole of society" approach to preparing for and responding to a cyber emergency.
The plan is available on the NCSC website.
ENDS
A senior official from the NCSC (National Cyber Security Centre) may be available for media engagements on this topic. Requests should be sent to the Press Office (Media Relations Unit) in the Department of Environment, Climate and Communications ( press.office@decc.gov.ie or 0876937580).
A cyber emergency is defined as any cyber incident which causes, or threatens to cause:
The Strategic Emergency Management Framework is available on the Department of Defence website.