Ireland’s National Cyber Security Strategy 2019–2024

Strategies and Action Plans

Author: Department of the Environment, Climate and Communications

The National Cyber Security Strategy 2019–2024 is Ireland’s comprehensive framework for safeguarding the digital foundations of its economy and society. Its purpose is to ensure the country remains resilient in the face of evolving cyber threats while also positioning itself as a leader in the global digital landscape.

This strategy builds upon the foundation established by the 2015 National Cyber Security Strategy. That earlier effort led to the creation and development of the National Cyber Security Centre (NCSC), along with a number of structural and operational improvements in how Ireland addresses cyber risk. Since then, technological, geopolitical, and infrastructural contexts have evolved, requiring a broader, more adaptive, and forward-looking approach.

The scope of this strategy encompasses national security, critical infrastructure protection, public sector IT systems, private enterprise engagement, cyber skills development, public awareness, and international cooperation. The strategy recognises that digital systems underpin everything from financial markets to public services and individual liberties. Therefore, a whole-of-society response is essential.

The policy framework laid out in this strategy acknowledges the interconnected nature of cyber threats, ranging from individual-level scams to sophisticated attacks on national infrastructure. It addresses not only the technical aspects of cybersecurity but also the societal, economic, legal, and diplomatic dimensions.

This strategy was developed through a participatory process that included a high-level steering group and five sector-specific engagement groups, along with a period of public consultation. The collaborative effort was intended to ensure that the strategy reflects the real needs and concerns of the state, its institutions, and its citizens.

Goals

  • To improve the state’s ability to manage and respond to cyber incidents, especially those with national security implications
  • To identify and enhance the resilience of critical national infrastructure, ensuring service continuity and incident preparedness
  • To strengthen public sector IT systems and safeguard citizen data and services
  • To advance education and workforce readiness for careers in cybersecurity and related fields
  • To promote cybersecurity awareness and responsibilities within the business sector, while driving research and innovation
  • To engage proactively in international cyber policy efforts and promote a secure, open, and stable cyberspace
  • To elevate cyber hygiene awareness and competencies across the general population

Focus areas

  • Strengthening the capacity and operational scope of the National Cyber Security Centre
  • Expanding legal and policy frameworks to secure both legacy and emerging digital infrastructures
  • Building a skilled workforce through formal education, apprenticeships, and public-private partnerships
  • Deepening public-private cooperation and information-sharing to manage cyber threats in real time
  • Integrating cyber policy into international diplomacy and governance discussions
  • Fostering an ecosystem where research, enterprise, and policy development intersect to create security-driven innovation
  • Implementing national campaigns to equip citizens with the knowledge and tools to protect themselves online