Member

However, it is right that NIS regulators are able to take enforcement action where organisations have failed to safeguard the security of the essential services and to do so they will need to have sight of ransomware attacks that have had a significant impact. I therefore cannot accept the idea of excluding ransomware incidents from the reporting provisions of the Bill, as this amendment envisages.