We have in Government the protective security standards that apply to a whole range of activities, but also including in information technology. Those standards are promulgated throughout the public sector and organisations, and particularly organisations of significance and scale are expected to meet those standards, to comply with those standards, as they run their information systems. Most organisations have, and make sure they have installed, appropriate protective software. But it is, of course, the case that, once installed, those programmes, those platforms, also have to be maintained so that protection is maintained and a standard of protection is maintained throughout. 