EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
How EY can help
-
Learn more about how organizations are accelerating transformation and strengthening cybersecurity at the same time.
Read more
From July 2026, Ireland will hold the Presidency of the Council of the European Union. This means that for six months, Irish government departments and public bodies will sit at the centre of EU decision‑making. This prestigious role brings more meetings, more data, more communications, and more attention from outside the country.
It also brings a higher level of cyber risk. EU presidencies have become natural targets for state‑sponsored actors, disinformation, and digital disruption. Experience from recent presidencies shows that this activity rises before the term starts and stays elevated throughout. Adding to the tension, this moment comes with higher geopolitical and cyber risk as Europe lives with the economic, physical, and technological effects of ongoing global conflict.
Government systems always carry sensitive material. However, during the presidency Irish government networks are expected to handle a significantly increased volume of sensitive materials, diplomatic communications and intergovernmental exchanges. Public‑facing platforms will see heavier use.
Any disruption to these communications can lead to impacts with national, EU-wide, or even global consequences. Even when systems keep running as normal, state actors may quietly read emails and collect information about EU plans and ongoing conflicts without drawing attention. Both forms of activity create risk during a period when decisions, timing, and trust are paramount.
Beyond government systems, Ireland hosts major global technology and financial companies, data centres, subsea cables, and critical infrastructure. Ireland’s significant role in ICT presents an additional avenue for state-sponsored disruption, potentially impacting the economy and EU-level decision-making during this vital timeframe.
Hybrid threats also warrant attention. The presidency period will see visits from Heads of State, diplomats, and other dignitaries. Recent incidents, such as the drone surveillance during President Zelensky’s visit to Dublin in December 2025 highlight the evolving nature of such threats and the potential for similar occurrences.
According to ENISA’s 2025 Threat Landscape report ongoing attacks predominantly target public administration, transport, digital infrastructure and services, finance, and manufacturing sectors (accounting for 53.7% of recorded incidents). Given these sectors are already highly targeted, proactive preparation is essential.