Dáil Éireann Debate, Tuesday - 21 November 2023
79. Deputy Louise O'Reilly asked the Taoiseach how many staff members in his Department received training in cyber security in the past three years; what types of cyber security training programmes have been conducted; if he will provide details of these programmes; and of the staff trained in cyber security, how many have obtained accredited cyber security qualifications. [50806/23]
View answer80. Deputy Louise O'Reilly asked the Taoiseach the expenditure on cyber security consultants and companies within his Department in the past three years; if his Department engaged in cyber security audits with outside firms in the past three years; if so, the expenditure on same; the amount his Department spent on cyber security consultants and companies in the past three years; and for a breakdown of these expenditures by year and type of service provided. [50824/23]
View answer81. Deputy Louise O'Reilly asked the Taoiseach if there are any ongoing contracts or commitments with cyber security firms; and if details can be provided [50842/23]
View answer82. Deputy Louise O'Reilly asked the Taoiseach if his Department has a policy and plan in place to address a ransomware attack and restore his Department's IT systems. [50860/23]
View answerI propose to take Questions Nos. 79, 80, 81 and 82 together.
The Department of the Taoiseach implements a security-by-design and defence-in-depth approach to cyber security in line with the Public Sector Cyber Security Baseline Standards.
Supplementing the technical measures, staff working in the Department of the Taoiseach are provided with regular cyber security awareness communications and all staff are supported in completing the Introduction to Cyber Security Awareness training module run through the Department of Public Expenditure, NDP Delivery and Reform's OneLearning programme.
In common with other Government Departments, the Department of the Taoiseach has in place comprehensive arrangements to support ICT security and receives regular advice on these matters from the relevant authorities including the Office of the Government Chief Information Officer and the National Cyber Security Centre. It is not the practice, for sound operational and security reasons, to disclose the detail of these arrangements.
