Network and Information Systems Directive

Network and Information Systems Directive

The EU Network and Information Systems Directive was formally adopted in 2016 and aims to achieve a high common level of security of network and information systems across the EU. The deadline for transposition of the Directive into Irish law was 9 May 2018. Transposition was achieved on 18 September 2018.

A requirement of the Directive is to adopt a national strategy that contains a number of requirements. No national strategy is currently in place and the previous strategy did not include some of the required elements such as: a risk assessment plan, a listing of various stakeholders and a governance framework.

Recommendation 8.4

The Department should ensure that its updated strategy meets all the requirements of the Directive.

Accounting Officer response

Agreed.

Work is already underway on a revised strategy which is expected to be completed by the end of 2018. A steering group will be established to bring all relevant stakeholders together in order to fully inform the process.

Accountability and oversight