2025-12-16

97. Deputy Donnchadh Ó Laoghaire asked the Minister for Defence the progress her Department has made regarding the establishment of a joint cybersecurity command and other actions related to cybersecurity contained in the Report of the Commission on the Defence Forces. [72045/25]

We have spoken about how potential defence and national security issues will not always be what we have traditionally imagined. Cybersecurity and hybrid threats are going to be significant features of that. The cybersecurity command has been established, which was called for in the Report of the Commission on the Defence Forces. That is very welcome, but progress in the implementation of its plans is what we now need. What is the current strength of the cybersecurity command? What will it be in 12 months’ time?

As recognised in the Report on the Commission on the Defence Forces and accepted by the Government, the Defence Forces need to be capable of delivering military effects across the cyber domain. To this end, my Department published the high-level action plan for the report, which included recommendations relating to the Defence Forces' cyberdefence functions. As a result, the Defence Forces have established the joint cyber defence command, which was established back in 2024. The command will be able to conduct full-spectrum cyberspace operations to robustly defend against cyber threats, support Defence Forces' operations at home and overseas, and enhance technicalities. I will provide the exact figures. The Department has approved the assignment of 19 Defence Forces specialist posts to kick-start the operation of this unit, which is headed by an officer of general rank. My Department has engaged with the Public Appointments Service to recruit ten civilian cyber specialists who will be embedded in this new cyber unit. To date, the Public Appointments Service has completed a recruitment campaign for these civilian cyber specialist roles and appointments are in the process of being made, so we are well under way in making sure that this unit has the appropriate support. Additionally, to make sure that there is appropriate infrastructure, the development of the purpose-built communications and information services, CIS, office block in McKee Barracks has been approved and procurement of same will commence shortly so that we do not just have the personnel, but also the physical infrastructure that is needed. To give effect to the strategy, the specialist units have been assigned. The new Defence Forces officer has been appointed to head up a specific unit at brigadier general level. In addition, my Department is engaging with the Public Appointments Service to recruit the various different specialists. I am satisfied that, from a defence perspective, we are developing a positive trajectory to ensure that the new cyber defence command unit is well positioned to meet the ambitious targets set out in the cyber strategy. The Defence Forces will liaise and work with their counterparts in An Garda Síochána in addressing and countering cyber threats. The work that is being done through this specific unit is only specifically looking at the Defence Forces and making sure that they are protected from any type of cyber threat. As time goes on, though, and working with An Garda Síochána, there is more we can do to look beyond that. The funding that I announced last week of €300 million for this year, rising to a further €360 million by 2029, illustrates the investment we are making in the Defence Forces, our capability and modernising infrastructure. It is important when we are doing that and investing in so much technology and equipment that we make sure that we have the right types of response, resource and structure in place to protect all of the investment.

I appreciate that it was not specifically written in the question, but if the Minister has the figure to hand, what does she expect the strength to be by the end of next year? I would appreciate that. The architecture around the whole area of cybersecurity is a little bit complicated in the sense that the National Cyber Security Centre is responsible for protecting the State broadly speaking, the Garda has responsibility as a major intelligence organisation, and the Defence Forces are responsible for protecting themselves. It is a combination to some degree of all three where there is a hybrid element and a kinetic element to it. With the development of this command, what are its priorities? How does it intend to develop? How advanced are protocols for those hybrid cyber threats that include a kinetic element and can include a cyber element? Part of that is the responsibility of the National Cyber Security Centre, but some of it potentially falls to the Defence Forces.

Relating to cybersecurity, the primary role of the Defence Forces is to defend and secure their networks and systems. The role of the Garda is to do the same and to look at other areas as well. Specifically in relation to the joint cybersecurity command, there are three key pillars to it: the joint command centre, which is receiving investment and is being developed; the strategy itself; and the additional posts. I will have to come back to the Deputy on the figure as regards the overall objective. The focus of my Department now, working with the Defence Forces, is on working on the implementation of all of this. That is happening. I believe a meeting is taking place as soon as tomorrow between members of my Department and the Defence Forces to make sure that the elements of the strategy can be implemented. Key areas of the strategy include: to prevent and defend against cyberattacks on Defence Forces' networks; to develop a comprehensive programme of training and cyber-related subjects; to identity and protect critical defence infrastructure and increase resilience to cyber attacks; and to conduct ongoing risk assessments to evaluate the potential impact and likelihood of cyberattacks on Defence Forces' networks. That is our focus immediately when looking at the Defence Forces themselves. However, I have no doubt that, as this beds down and our capability and capacity increase, there will be more ways in which we will be able to work collectively and closely with An Garda Síochána on this issue.

It is very possible that future threats to our national security will potentially arise in a hybrid way. It is not inconceivable that we could have a kinetic or physical element to something, such as what we had with drones recently, as well as a co-ordinated cyberattack on Defence Forces' equipment, personnel and installations to hinder the ability of the Defence Forces to deal with the kinetic element of it, for example, drone interference with airports, infrastructure, visiting Heads of States and so on. The primary responsibility for the cyber element of that lies with the National Cyber Security Centre. Clearly, there need to be agreed protocols in relation to how that hybrid element or instances are dealt with. Is there such a protocol and how recently has it been concluded? Is there an agreed protocol between the National Cyber Security Centre, the Garda and the Defence Forces in terms of how they will respond? Is there a clear plan of action in those instances?

I agree with the Deputy that the changing nature of threats is clearly moving towards hybrid threats in a way that we have never dealt with before. I know from a previous role that the Garda has been investing significantly in its capabilities, capacity and workforce. That is why we are doing what we are doing here with the Defence Forces. There is an emergency group that I chair when it relates to specific defence matters. It is chaired by the Minister for the environment if there are natural disasters or other issues that need to be dealt with. This group brings together all of the relevant bodies to be able to respond to particular threats, be they hybrid threats, cyber threats or otherwise. That group meets as it needs to and there are protocols in place. We need to make that they are always up to date and that we are able to respond to the changing threats and environments that are there. I have no doubt that I will be chairing that meeting in the near future. In fact, I know that I will. It is important that we make sure that we are alert and live to all types of threat and that the different arms of the State are working together and in close in communication. The Garda Commissioner and the head of the Defence Forces are working closely together, not just because of the EU Presidency, but because of the changing nature of the threats that we have both referenced.