Richard Browne

And then receding then into the far end of the probability matrix, it's also possible you'll see destructive attack.

It's very unlikely.

It's very, very rare, but it could happen.

And we have to be aware of that too and prepared for that as well.

So we have statutory powers since 2018 around incident response for critical infrastructure.

So we're already empowered to do a large amount of what we're doing.

There's a further European Union directive that is being transposed right now, the cybersecurity bill.

The actual final version hasn't been published yet.

What that will do is essentially establish us on a statutory basis.

It won't allow us to do much more on that, but will also give us statutory powers to do more in the national security space.

Those powers are obviously necessary up to the Oireachtas, of course, if we get them in the form that they're published.

But beyond that, there's more we can do with the NIS2 or the new directive type powers.

But absent them, we can still do a huge amount already.

We have a fully established, you know, in the top 10 in Europe cyber incident response team.

We've published national cyber emergency response plan.

We've exercised it repeatedly.

We have very strong powers already with regard to critical infrastructure.

So we're in a fairly good position anyway.