Dáil Éireann Debate, Thursday - 7 May 2026
135. Deputy Naoise Ó Cearúil asked the Minister for Defence the way in which her Department is contributing to the national risk assessment of critical entities required under the National Strategy on the Resilience of Critical Entities 2026–2029, particularly in relation to cyber and hybrid threats affecting maritime, energy and communications infrastructure; and if she will make a statement on the matter. [33219/26]
Amharc ar fhreagraThe European Union (Resilience of Critical Entities) Regulations 2024 were signed on 15 October 2024, implementing the European Directive on Critical Entities Resilience, commonly known as the CER Directive. Part Six of these regulations requires the Minister of Defence to conduct a national risk assessment. Building on the ongoing National Risk Assessment for Ireland, which is conducted every three years as mandated by a separate EU Directive, 1313/2013/EU, the Office of Emergency Planning and the National Risk Assessment Working Group reviewed the latest risk assessment. I subsequently published a technical amendment to the National Risk Assessment to align with the requirements of the 2024 CER Regulations.
The National Risk Assessment identifies 22 key risks. Among those assessed are Maritime Incidents, Damage to Undersea Infrastructure, Cyber Attacks, Disruptions to Critical Supply Chains, Disruptions to Gas and Electricity Supplies, and Terror Attacks. The complete National Risk Assessment is available on the Office of Emergency Planning's website.
Since 2022, the National Emergency Coordination Group has conducted exercises focusing on disruptions to electricity, gas, and oil supply, as well as transport, cyber, and radiological emergency scenarios. Notably, Exercise PÚCA took place in February 2025; it was Ireland's first exercise specifically addressing an intentional hybrid attack on the state. In November 2026, Ireland will participate with other EU Member States in Exercise Integrated Resolve 2026. This exercise will assess the EU's capacity to manage a complex crisis focusing on hybrid incidents affecting multiple Member States.
Question No. 136 answered with Question No. 107.
