My Lords, the MoD has in place, and regularly refreshes, robust resilience plans in case any of its systems are compromised or prejudiced by an adverse attack. Although this incident relates to systems operated by a primary contractor and not the MoD, I ask my noble friend whether primary contractors are required to observe the same high standards of preparedness as the MoD. Did this particular contractor comply with these requirements?