Once the Waikato DHB has remediated their systems, returned to business as usual, then there will be—because there has to be—an appropriate inquiry, an independent inquiry into the state of the system before the ransomware attack, and then the quality of their response to it. At that point, and only at that point, will we have an understanding about the extent to which that system was vulnerable, the extent to which any steps that might have been taken to provide further protection could have been taken, or whether indeed it was a DHB that had done everything expected of it and had met the appropriate standards expected of it. 