Current Status: Implemented
Expected or actual implementation date or timeline
If implemented, whether a transition period applies and, if so, its duration
- Under the Regulations, the Minister for Defence had 15 months, from the date of enactment, to carry out a National Risk Assessment, and develop a National Strategy (both of which appear to have been done).
- Regulation 8 identified the Competent Authorities with responsibility for critical sectors in Ireland (eg water, transport, etc).
- The Competent Authorities then have 21 months after the enactment of the Regulations to identify critical entities for the sectors and sub-sectors they have responsibility for, and then, those entities must be notified no later than 1 month after the date they have been so identified.
- The Regulations will apply to the critical entities identified 10 months after the date of the notification referred to above.
Other important remarks/notes
- In a debate in the Dáil in September 2025, Naoise Ó Muirí questioned the development of the risk assessment and national strategy, in line with the Directive. Simon Harris replied that the Directive had been implemented and work was ongoing to develop a national strategy.
- On the Government’s page dedicated to the implementation the risk assessment and the national strategy are also linked (see below).
- National Risk Assessment for Ireland 2023 (Updated 2026)
- National-Strategy-on-the-Resilience-of-Critical-Entities-20262029.pdf
- A dedicated single point of contact was also set up at cer@defence.ie
Key contact

© Eversheds Sutherland. All rights reserved. Eversheds Sutherland is a global provider of legal and other services operating through various separate and distinct legal entities. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client.
Connect with us





