Canada’s approach to cyber security review

September 9, 2016
Author: iscc_admin

Public Safety Canada is conducting a consultation to review Canada’s approach to cyber security. Internet Society Canada Chapter (ISCC) will participate in this consultation to ensure that Public Safety Canada is informed of the views and ideas of Canadians on a broad range of cyber security issues and topics. Accordingly, we are inviting you to participate in an ISCC-led stakeholder discussion on the kinds of policies and programs that Canada should pursue to develop a robust cyber security strategy going forward.

The event will take place on Monday September 19, 2016 between 11:45 AM and 1:00 PM Eastern Daylight Time at the offices of the Canadian Internet Registration Authority (CIRA) | 979 Bank Street, Suite 400, Ottawa, Ontario.

Those who cannot attend in person can participate by way of teleconference.

Please note that capacity for this event is limited and so only a limited number of attendees can be accommodated in person. If you wish to attend in person, please RSVP early using the following link:
https://www.eventbrite.ca/e/internet-society-canada-chapter-cyber-security-event-tickets-27635385181
If you intend to participate by teleconference, please do not register and just link in via
https://isoc.zoom.us/j/2956385248

The Public Safety cyber security consultation seeks input on the following questions:

 Consultation Questions
Trend Theme Questions
Evolution of the cyber threat Addressing Cyber-crime How can law enforcement better address the growing challenge posed by cybercrime (for example, through training and capacity-building, equipment, partnerships, innovative initiatives)?
How can public and private sector organizations help protect themselves from cybercrime, such as threat of ransomware attack, fraud and identity theft, and what tools do they need to do so?
Are there barriers to reporting cybercrimes (or suspected cybercrime) to law enforcement agencies? If so, what are they?
Policing in Cyberspace What are your expectations for policing in cyberspace? Are they different from policing in the physical world?
In a digital age, security and privacy go hand in hand. How can cybercrime be addressed in a manner that respects Canadians’ privacy rights and protects public safety?
Protecting Against Advanced Cyber Threats What do public and private sector organizations need to protect themselves from advanced cyber threats (for example, tools, capacity, information)?
What are the constraints to information sharing on advanced cyber threats and associated vulnerabilities?
Increasing Public Engagement How can public and private sector organizations work together to build Canadians’ awareness of cyber security issues (for example, joint online training initiatives)?
How can individuals be better informed about how to recognize and react to a cybercrime (like spear phishing) or a cyber security vulnerability (for example, security of networked cars or connected health
devices like pacemakers)?
Increasing Economic Significance of Cyber Security Strengthening Consumer Confidence in E-Commerce How can Canadian businesses be encouraged to adopt better cyber security regimes – particularly small and medium enterprises?
What factors do you think are important to consider before sharing your personal and financial information with businesses online (for example websites displaying a Secure logo, web addresses
beginning with https)?
Embracing New Cyber-Secure Technologies What steps should be taken to ensure that networked and emerging technologies (like internet-of-things and apps) are cyber secure?
Protecting Critical Infrastructure What are the barriers to strengthening cyber systems in critical infrastructure (within and across sectors)?
What are the constraints to information sharing and engagement related to protecting cyber systems of Canada’s critical infrastructure?
Expanding Frontiers of Cyber Security Building a 21st Century Knowledge Base What information (e.g. data, metrics) would contribute to a better understanding of cyber security Q issues in Canada?
Encouraging Growth and Innovation What is needed to improve Canadian innovation in cyber security?
What measures could be taken to improve the availability, relevance, and quality of cyber security training?

In addition, to these questions, the consultation also seeks to elicit broader feedback of three key action areas:

  • Resilience: This area would focus on the essential elements of cyber resilience. This includes the prevention, mitigation, and response to advanced cyber attacks targeting Canadian systems and institutions, and increasing public engagement on cyber security issues.
  • Cooperation and Capability: This area would focus on working together to develop the skills, resources, and tools needed for effective cyber security in Canada.
  • Cyber Innovation: This area would focus on initiatives that will allow Canadian governments, businesses, and citizens to anticipate trends, adapt to a changing environment, and remain on the leading edge of innovation in cyber security.

The output of the discussion from this event will be converted into a submission that ISCC will file in the Consultation on Cyber Security by the October 15, 2016 deadline.