What must Ireland keep running when systems fail

When multiple critical systems fail at once, Ireland must know which services, decisions and outcomes it cannot afford to lose.

In brief

• Ireland needs an agreed national continuity baseline defining the essential outcomes and minimum services the country must sustain through severe disruption.
• That baseline must coordinate safe degradation, shared dependencies, decision authority and restoration priorities across sectors.
• Ireland must prove these arrangements through realistic compound scenarios rather than relying on separate organisational plans.

Ireland has strengthened its approach to resilience. Investment in critical infrastructure is increasing, regulatory expectations are rising, and organisations are paying greater attention to cyber, operational, supply chain and AI-related risk. Yet resilience is tested not when a single organisation experiences disruption, but when several interconnected systems fail at the same time. The next step is therefore not another organisational continuity plan.

It is an agreed national answer to a more fundamental question: if several of Ireland’s critical systems failed simultaneously, what would the country have to keep running?

Why national continuity matters

The question matters because disruption is becoming more interconnected and can quickly cascade across systems. As critical services become more digital, automated and dependent on shared infrastructure, failures are less likely to remain contained within a single organisation or sector. A disruption in one area can quickly create consequences elsewhere, exposing vulnerabilities that may be invisible when resilience is planned in isolation.

Modern systems do not necessarily fail one at a time or remain within one sector. Electricity supports communications. Communications support emergency coordination. Transport moves critical workers and supplies. Digital infrastructure supports healthcare, payments and public information. During severe disruption, these services may compete for the same power, connectivity, specialist personnel, technology and suppliers.

If national priorities have not been agreed beforehand, they will be decided during the crisis, with incomplete information and limited time. Ireland, therefore, needs a national continuity baseline: an agreed definition of the essential outcomes and minimum service levels that the State, critical sectors and essential service providers must sustain during severe disruption.

The national system is more than the sum of its plans

Individual organisations need robust continuity and recovery arrangements. But organisational resilience does not automatically produce national continuity. An essential service may have effective internal plans while remaining exposed to failures in electricity, communications, cloud platforms, transport, specialist personnel or suppliers. Organisations can appear resilient individually while the national system remains vulnerable to shared dependencies and cascading failure.

National continuity must therefore be designed as one connected system. EY Ireland’s Minimum Viable State concept provides a foundation for doing this. It defines the essential outcomes that must continue, the minimum service levels required to sustain them, the critical dependencies involved and the sequence for recovery. The underlying Resilient Nation approach connects these elements with dependency mapping, command and control, recovery sequencing, scenario testing and evidence-based validation.

At national level, this becomes a question of sovereignty of outcomes, not technological isolation. Ireland will continue to depend on international platforms, providers and infrastructure. The test is whether the State understands those dependencies and retains credible control, continuity and recovery options when normal arrangements fail.

Five connected questions that can turn a principle into a national capability

1. What must never stop?

Ireland must identify the minimum outcomes needed to protect life, maintain public safety, preserve national decision-making and sustain essential economic activity. These are likely to depend on capabilities across healthcare, emergency response, energy, water, communications, payments, essential supplies, transport and trusted public information.  The focus should be on outcomes, not organisational boundaries. Each outcome must be traced through the services, people, data, technology, facilities and suppliers required to sustain it.

2. What can safely degrade?

Not every service can operate normally during systemic disruption. Ireland needs agreed thresholds defining what reduced service looks like, how long it can be tolerated and which safeguards must remain. Safe degradation may involve reduced capacity, alternative channels, manual workarounds or the controlled suspension of less critical activities. This is the difference between a managed reduction in service and uncontrolled failure. The thresholds, safeguards and triggers must be agreed before disruption occurs.

3. Which dependencies determine whether Ireland retains control?

Essential services rely on shared infrastructure and providers that often support multiple critical sectors. Ireland must understand how disruption could cascade across these dependencies, identify concentration risks and determine how scarce resources would be prioritised during a national crisis. This should inform infrastructure planning, investment and procurement. As transport, water, energy and public services become increasingly digital, automated and AI-enabled, resilience must be built in from the outset. The objective is not to eliminate external dependency. The aim should be to make important dependencies visible, governable and recoverable.

4. Who decides what restarts first?

Cross-sector disruption requires clear national decision rights and restoration priorities. Government departments, regulators, critical operators and technology providers must understand:

• Who has authority when several sectors are affected;
• Which outcomes receive priority access to constrained resources;
• Which services can operate in a degraded state;
• When automated processes can be interrupted;
• Which dependencies must be restored first; and
• How national priorities will be communicated to suppliers.

AI increases the urgency. ENISA¹ warns that AI can accelerate the pace of disruption and create an "Authority Gap" in which human decision-making struggles to keep up. Where AI-enabled systems support essential services, clear accountability, intervention thresholds and fallback arrangements must be established before a crisis occurs. Ireland must therefore ensure clear accountability, human oversight and fallback arrangements for essential services as disruption accelerates.

5. Have the arrangements been proven?

A national continuity baseline has limited value unless Ireland can demonstrate that it works.

Exercises should use compound scenarios affecting several sectors simultaneously. They should test whether:

• Essential outcomes remained available
• Degradation stayed within agreed thresholds
• Decision and escalation arrangements worked
• Shared dependencies behaved as expected
• Constrained resources were prioritised effectively; and
• Critical operations were restored in the intended sequence.

This is where Resilience Engineered turns national continuity from an aspiration into demonstrated capability. Through scenario-based validation, it tests assumptions, measures performance and provides evidence to inform leadership decisions, regulatory reporting and investment priorities.