and Security Guidelines 4 Security Control testing post incidents, Ongoing NCSC and ongoing audits of OES compliance Designated OES Measure 4: The NCSC, with the assistance of the Defence Forces and An Garda Síochána, will perform an updated detailed risk assessment of the current vulnerability of all Critical National Infrastructure and services to cyber attack. Actions for Delivery Timeline by Lead Quarter 1 Steering Group formed and terms of Q1 2020 Key Stakeholders NCSC reference for the review agreed AGS, DF, NSAC, CBI, COMREG, CRU, IAA 2 Information gathering phase complete, Q3 2020 NCSC and methodology agreed AGS, DF, NSAC, CBI, COMREG, CRU, IAA 3 4 Complete Assessment Process, Q2 2021 NCSC AGS, DF, including international consultation and NSAC, CBI, detailed assessment of cross sectoral COMREG, interdependencies. CRU, IAA Final Report and Recommendations Q4 2021 NCSC Complete AGS, DF, NSAC, CBI, COMREG, CRU, IAA Measure 5: The existing Critical National Infrastructure protection system will be expanded and deepened over the life of the Strategy to cover a broader range of Critical National Infrastructure, including aspects of the electoral system. Actions for Delivery Timeline by Lead Quarter 1 Draft Heads of Bill for Agreement by Key Stakeholders Q4 2021 DCCAE AGO Q1 2022 DCCAE AGO Government 2 Drafting Process with AGO 29