Dublin is hosting a major European cybersecurity conference on 7 October as part of Ireland’s Presidency of the Council of the European Union, with artificial intelligence, ransomware, supply-chain security and critical infrastructure among the central themes. The event is the centrepiece of Ireland’s EU Presidency Cyber Week and brings together senior officials, technology companies, academics and cyber-security practitioners.
The timing matters. AI systems are increasingly being used both to defend networks and to automate parts of cyber attacks. At the same time, ransomware remains a costly threat to organisations, while governments are paying more attention to subsea cables, cloud services, software supply chains and other infrastructure that modern economies depend on.
What is happening in Dublin?
The National Cyber Security Conference takes place in Dublin on 7 October. According to the Irish EU Presidency programme, the event has a strong European and international focus and is designed to examine how Europe can improve cyber resilience while remaining competitive.
The programme covers digital sovereignty, supply-chain security, EU cyber regulation and certification, operational cooperation, crisis coordination, cyber diplomacy, attribution, deterrence, civil-military cooperation and resilience of critical infrastructure. Emerging technology, including AI and post-quantum security, is also part of the agenda.
Why is AI now a cyber-security issue?
AI is useful to defenders because it can help analyse logs, detect unusual behaviour, prioritise alerts and speed up repetitive investigation. The same class of tools can also help attackers write convincing phishing messages, automate reconnaissance, generate malicious code or scale social-engineering campaigns.
The important distinction is that AI does not remove the need for basic security controls. Organisations still need strong identity management, multifactor authentication, secure backups, patched systems and clear incident-response procedures. AI can make those controls more effective, but it can also increase the speed at which mistakes are exploited.
What does “digital sovereignty” mean?
Digital sovereignty is the idea that Europe should be able to make critical technology choices without becoming dangerously dependent on a small number of external suppliers. That does not mean cutting Europe off from global technology companies. It means understanding where important services, data and infrastructure are concentrated and planning for disruption.
For Irish businesses, the issue is practical. A company may depend on one cloud provider, one identity platform, one payment service and one communications vendor. If one of those fails or is compromised, the impact can spread quickly across the organisation.
Why supply-chain security is on the agenda
A company can have good internal security and still be exposed through a supplier. Modern software includes open-source libraries, cloud components, third-party integrations and managed services. A vulnerability in one widely used component can affect thousands of organisations at once.
That is why organisations are increasingly being asked to know which suppliers have access to sensitive systems, what software components they depend on and how quickly they can respond if a vendor reports a breach.
What is the ransomware problem for Ireland?
Ransomware combines technical compromise with financial pressure. Attackers may encrypt systems, steal data and threaten publication unless a payment is made. The disruption can be more expensive than the ransom itself because organisations may lose access to email, patient records, logistics systems, booking platforms or payment services.
Ireland has particular exposure because it hosts a large technology sector and many international businesses. A serious incident at one organisation can therefore have consequences well beyond the company that was first attacked.
Why critical infrastructure now includes more than electricity
Traditional critical infrastructure includes energy, water, transport and health systems. Modern cyber planning also has to consider cloud computing, data centres, telecom networks, subsea cables and digital identity systems.
Many services are interconnected. A communications outage can affect payment terminals. A cloud incident can disrupt logistics. A compromised identity service can allow attackers into several business systems at the same time.
What does post-quantum security have to do with today?
Powerful quantum computers capable of breaking widely used public-key cryptography are not yet available at the scale required for broad attacks. But organisations with data that must remain confidential for many years cannot wait until the threat is fully mature before planning.
Migration to post-quantum cryptography takes time because certificates, hardware, software libraries and business processes may all need to change. The sensible approach is to inventory cryptographic systems now and identify the data that would still be valuable if decrypted years later.
What should Irish businesses do now?
- Use multifactor authentication for staff, administrators and remote access.
- Keep offline or otherwise protected backups and test restoration regularly.
- Know which suppliers can access sensitive systems or data.
- Patch internet-facing systems quickly when serious vulnerabilities are disclosed.
- Train staff to verify payment changes and unusual requests through a second channel.
- Prepare an incident-response plan with named decision makers and contact details.
- Review where AI tools are allowed to process confidential or customer information.
What should small businesses focus on first?
Smaller organisations do not need a complex security programme to reduce the most common risks. Start with identity protection, software updates, backups and payment verification. Those controls prevent or limit a large share of common incidents.
It is also worth checking whether cyber insurance, outsourced IT support or cloud contracts require specific controls. Discovering those requirements only after an incident can create an expensive second problem.
Why cyber regulation keeps expanding
Governments increasingly treat cyber resilience as an economic and public-safety issue rather than a purely technical one. Regulations aim to make organisations responsible for managing risks, reporting serious incidents and securing products and services throughout their life cycle.
For businesses, compliance should not become a paper exercise. A policy that exists only to satisfy an audit will not restore systems during a ransomware attack. The useful question is whether the organisation can still operate, communicate and recover when a key digital dependency fails.
What the Dublin conference signals
The conference shows that Europe’s cyber-security debate is moving beyond individual breaches. The focus is now on resilience across supply chains, infrastructure, regulation and emerging technologies.
For Ireland, the event is also a chance to show its role as a major European technology hub. But the practical test will come after the conference: whether organisations improve real defences, reduce concentration risks and become faster at responding when an incident occurs.
Sources
The official Irish EU Presidency page for the National Cyber Security Conference lists the 7 October date and the agenda themes, including AI, post-quantum technology, supply-chain security and critical infrastructure.
RTÉ also reported on 7 October that the conference would include representatives from technology companies, government, EU institutions, academia and the wider European cyber-security community.
More Irish technology coverage is available in Technology.
