Despite a stern warning from one of Canada’s security review bodies, most Crown corporations, smaller government departments and agencies haven’t heeded the call to use specialized cyber defence sensors to protect their networks from state-sponsored attacks, says a recent report.
The committee wrote that Crown corporations and small government departments and agencies (SDAs) — defined as those with fewer than 500 staffers and annual budgets of less than $300 million — are not required to follow the same cyber policies as other government departments. The report warned this state of affairs could pose “a security risk to government networks.”
“Those organizations receive, hold and use the sensitive information of Canadians and Canadian businesses, information that is at risk of compromise by the most sophisticated of cyber actors, including states,” the report said.
“Moreover, unprotected organizations potentially act as a weak link in the government’s defences by maintaining electronic connectivity to organizations within the cyber defence framework, creating risks for the government as a whole. These challenges are well known to the government.”
NSICOP’s report — which was submitted to Prime Minister Justin Trudeau in August 2021 and tabled in Parliament in February 2022 — said that while China and Russia are the most sophisticated cyberthreat actors targeting the federal government, Iran and North Korea have “moderately sophisticated” capabilities.
The committee has recommended that the cyber defence sensors of the Communications Security Establishment (CSE) be extended to cover all federal entities.
But new numbers from the CSE, Canada’s cyber intelligence and security agency, show that less than half of Crown corporations and smaller departments and agencies “whose IT infrastructure is outside the government’s network defences” followed that recommendation.
“Since March 2020, the number of Crown corporations and SDAs signed up for our sensors has grown from 12 to 37 (out of 86),” says the CSE’s 2022-2023 report.
“The Cyber Centre continues to view this sector as a high priority and is working to onboard more federal institutions to our services.”
CSE sensors process over 200K events per second
Robyn Hawco, CSE spokesperson, said the agency uses its own in-house technology — called Host-Based Sensors, or HBS — on government servers, laptops and desktops.
“To put it simply, each sensor securely gathers system data, while protecting the privacy of those using this service. That data is fed back to our experts for analysis. They map any malicious activity, such as malware trying to download, and document the recipe to inoculate other devices from being infected in future,” said Hawco.
“The HBS technology is user-friendly and not only detects but also neutralizes malicious activity, automatically.”
The sensors process over 200,000 host events per second, she said.
The Communications Security Establishment complex in Ottawa on October 15, 2013. CSE said it encourages Crown corporations “to opt into the full range of cyber security services we offer.” (Sean Kilpatrick/Canadian Press)
In a media statement, the Treasury Board said Crown corporations and smaller agencies are ultimately responsible for their own cyber defence decisions.
“All federal organizations, including Crown corporations, can access the government’s cyber defence services and TBS continues to encourage them to take advantage of the full complement of the government’s cyber defence services,” says the statement.
Treasury Board said Shared Services Canada is working to provide an initial group of 43 small departments and agencies with advanced cyber defence services, using funding earmarked in the 2022 federal budget.
“In addition, all federal organizations, including Crown corporations, can enter into agreements in order to align with TBS cyber defence policies, or to seek cyber defence services from the Cyber Centre,” says the statement.
Testifying before a Senate committee earlier this year, NSICOP member Sen. Frances Lankin said government inertia is the reason why the committee’s recommendation was meant to be compulsory.
“In this report, we saw very clearly that there are gaps and those gaps are dangerous for Canadians and dangerous for our national security, personal data,” she said.
“I think that there is a willingness to move, but there’s great reluctance and inertia at times within large departmental structures and the interdepartmental relations.”
NSICOP has been ignored before
It’s not the first time government departments and agencies have failed to act on recommendations from NSICOP, a special committee made up of MPs and senators.
The committee released a report back in 2019 that urged Ottawa to take the threat of foreign interference more seriously.
“Canada has been slow to react to the threat of foreign interference,” wrote the committee in a 2019 report looking at the government’s response to foreign meddling.
“The government must do better.”
After at first not responding to the report, Trudeau acknowledged his government should be doing a better job.
“We have to do a better job on following up on those recommendations. I fully accept that,” he told a news conference back in March.
Those comments came as Trudeau announced he was asking NSICOP to review the state of foreign interference in Canada’s democratic processes since 2018.
NSICOP has since agreed and the review is ongoing.
OTTAWA – Prime Minister Justin Trudeau says the NDP is caving to political pressure from Conservative Leader Pierre Poilievre when it comes to their stance on the consumer carbon price.
Trudeau says he believes Jagmeet Singh and the NDP care about the environment, but it’s “increasingly obvious” that they have “no idea” what to do about climate change.
On Thursday, Singh said the NDP is working on a plan that wouldn’t put the burden of fighting climate change on the backs of workers, but wouldn’t say if that plan would include a consumer carbon price.
Singh’s noncommittal position comes as the NDP tries to frame itself as a credible alternative to the Conservatives in the next federal election.
Poilievre responded to that by releasing a video, pointing out that the NDP has voted time and again in favour of the Liberals’ carbon price.
British Columbia Premier David Eby also changed his tune on Thursday, promising that a re-elected NDP government would scrap the long-standing carbon tax and shift the burden to “big polluters,” if the federal government dropped its requirements.
This report by The Canadian Press was first published Sept. 13, 2024.
Simon Jolin-Barrette, minister responsible for consumer protection, has tabled a bill to force merchants to calculate tips based on the price before tax.
That means on a restaurant bill of $100, suggested tips would be calculated based on $100, not on $114.98 after provincial and federal sales taxes are added.
The bill would also increase the rebate offered to consumers when the price of an item at the cash register is higher than the shelf price, to $15 from $10.
And it would force grocery stores offering a discounted price for several items to clearly list the unit price as well.
Businesses would also have to indicate whether taxes will be added to the price of food products.
This report by The Canadian Press was first published Sept. 12, 2024.
Quebec legislature member Youri Chassin has announced he’s leaving the Coalition Avenir Québec government to sit as an Independent.
He announced the decision shortly after writing an open letter criticizing Premier François Legault’s government for abandoning its principles of smaller government.
In the letter published in Le Journal de Montréal and Le Journal de Québec, Chassin accused the party of falling back on what he called the old formula of throwing money at problems instead of looking to do things differently.
Chassin says public services are more fragile than ever, despite rising spending that pushed the province to a record $11-billion deficit projected in the last budget.
He is the second CAQ member to leave the party in a little more than one week, after economy and energy minister Pierre Fitzgibbon announced Sept. 4 he would leave because he lost motivation to do his job.
Chassin says he has no intention of joining another party and will instead sit as an Independent until the end of his term.
He has represented the Saint-Jérôme riding since the CAQ rose to power in 2018, but has not served in cabinet.
This report by The Canadian Press was first published Sept. 12, 2024.
