Government pledge on delayed cyber bill
The Government has launched the third national strategy on cyber-security, which covers the period up to 2030.
The strategy includes a commitment to implementing the whole range of EU cyber-security legislation – including measures on critical infrastructure and products with digital elements.
In July, the European Commission referred Ireland to the EU’s Court of Justice for failing to transpose the NIS2 directive on cybersecurity into national law.
The strategy states that the Department of Justice, Home Affairs and Migration is working with the Office of Parliamentary Counsel and the Attorney General's office to prepare a draft of the National Cyber Security Bill, which will transpose the EU directive into Irish law, to Government.
'Well-resourced' framework
The bill, the general scheme of which was published in 2024, was included for priority publication in the Government's autumn legislative programme.
The strategy describes the transposition and implementation of the EU directive as "a major cross-Government project" that requires a "robust and well-resourced regulatory framework" of NCAs (national competent authorities).
Under the proposed bill, NCAs will take on new and expanded supervision and enforcement powers.
Detection network
The strategy published today (7 October) pledges to set up a National Detection Network and establish a National Cyber Hub.
Minister Jim O'Callaghan said that the development of new national cyber-defence services would move the State towards "a more proactive" cyber-defence posture.
The document also calls for the establishment of a Cyber Security Research Centre of Excellence to lead cyber-security research in Ireland.
While it notes concerns about the "wide range" of activities carried out by state-aligned actors, it argues that the greatest threat to Irish network and information systems remains cyber-crime by "opportunistic" criminal groups.