Security committee finds gaps in federal cyberdefences that place vital data at risk
The committee of MPs and senators which oversees federal security policy has uncovered gaps in Canada's cyberdefences that could leave many agencies vulnerable to state-sponsored hackers from countries like China and Russia.
In a new report, the National Security and Intelligence Committee of Parliamentarians says cyberthreats to government systems and networks are a significant risk to Canada's security and government operations.
It points to Beijing and Moscow as the most sophisticated cyberthreat actors targeting the government, while Iran and North Korea have moderately advanced capabilities and pose less of a danger.
The committee says although nation states represent the most highly developed threats, any player with malicious intent and sophisticated capabilities puts the government's data and the integrity of its electronic infrastructure at risk.
The report concludes the federal government has built a strong cyberdefence system to counter this threat over the last decade.
However, it is weakened by the inconsistent application of policies and use of cyberdefence services across government.
The report, tabled in Parliament late Monday, is a redacted version of a classified document submitted to Prime Minister Justin Trudeau last August.
Governments are highly attractive targets for cyberattacks, the report says.
"The federal government holds enormous amounts of data about Canadians, Canadian businesses and innovative sectors such as universities and research institutes. Cyber compromises of this data could reveal sensitive personal information of Canadians and sap the vitality of individual companies and of the economy."
The government also manages foreign, trade and security relations through electronic infrastructures that, if compromised, could damage federal policies and undermine Canada's vital interests, the report adds.
It provides new details about the sweeping nature of an early attack by a Chinese state-sponsored attacker that served as a "wake-up call" for the federal government.
Between August 2010 and August 2011, China targeted 31 departments, with eight suffering severe compromises. Information losses were considerable, including email communications of senior government officials and mass theft of information from several departments, such as briefing notes, strategy documents, secret material, and password and file system data.
The report also reveals new information about a debilitating 2014 attack on the National Research Council, saying a Chinese state-sponsored actor used its access to the network to steal more than 40,000 files.
"The theft included intellectual property and advanced research and proprietary business information from NRC's partners. China also leveraged its access to the NRC network to infiltrate a number of government organizations."
It cost more than $100 million to deal with the problem.
Three organizations, the Treasury Board of Canada Secretariat, Shared Services Canada and the Communications Security Establishment, work closely together -- and with other government departments -- on federal cyberdefences, the report says.
Ideally under the system, government networks fall within a single electronic perimeter with a handful of access points to the internet that are monitored by sophisticated sensors capable of detecting and blocking known threats.
Departments should continually update and patch their devices and systems under the co-ordinated direction, advice and guidance of the three organizations, the report adds.
However, the current cyberdefence system "has not yet achieved this ideal."
The key weaknesses include:
-- Treasury Board policies relevant to cyberdefence are not applied equally to departments and agencies, creating gaps in protecting government networks from cyberattack;
-- Crown corporations are known targets of state actors, but are not subject to Treasury Board cyber-related directives or policies and are not obligated to obtain cyberdefence services from the government, placing their data at risk; and
-- Cyberdefence services are provided inconsistently, meaning, for instance, many agencies do not benefit from Shared Services Canada's full complement of assistance.
"The threat posed by these gaps is clear," the report says. "The data of organizations not protected by the government cyber defence framework is at significant risk."
Moreover, unprotected organizations potentially act "as a weak link" in the government's defences by maintaining electronic connectivity to organizations within the cyberdefence framework, creating risks for the government as a whole.
In responses included in the report, the government agreed with the committee's various recommendations to address the deficiencies.
This report by The Canadian Press was first published Feb. 15, 2022.
IN DEPTH
Jagmeet Singh pulls NDP out of deal with Trudeau Liberals, takes aim at Poilievre Conservatives
NDP Leader Jagmeet Singh has pulled his party out of the supply-and-confidence agreement that had been helping keep Prime Minister Justin Trudeau's minority Liberals in power.
'Not the result we wanted': Trudeau responds after surprise Conservative byelection win in Liberal stronghold
Conservative candidate Don Stewart winning the closely-watched Toronto-St. Paul's federal byelection, and delivering a stunning upset to Justin Trudeau's candidate Leslie Church in the long-time Liberal riding, has sent political shockwaves through both parties.
'We will go with the majority': Liberals slammed by opposition over proposal to delay next election
The federal Liberal government learned Friday it might have to retreat on a proposal within its electoral reform legislation to delay the next vote by one week, after all opposition parties came out to say they can't support it.
Budget 2024 prioritizes housing while taxing highest earners, deficit projected at $39.8B
In an effort to level the playing field for young people, in the 2024 federal budget, the government is targeting Canada's highest earners with new taxes in order to help offset billions in new spending to enhance the country's housing supply and social supports.
'One of the greatest': Former prime minister Brian Mulroney commemorated at state funeral
Prominent Canadians, political leaders, and family members remembered former prime minister and Progressive Conservative titan Brian Mulroney as an ambitious and compassionate nation-builder at his state funeral on Saturday.
Opinion
opinion Don Martin: Gusher of Liberal spending won't put out the fire in this dumpster
A Hail Mary rehash of the greatest hits from the Trudeau government鈥檚 three-week travelling pony-show, the 2024 federal budget takes aim at reversing the party鈥檚 popularity plunge in the under-40 set, writes political columnist Don Martin. But will it work before the next election?
opinion Don Martin: The doctor Trudeau dumped has a prescription for better health care
Political columnist Don Martin sat down with former federal health minister Jane Philpott, who's on a crusade to help fix Canada's broken health care system, and who declined to take any shots at the prime minister who dumped her from caucus.
opinion Don Martin: Trudeau's seeking shelter from the housing storm he helped create
While Justin Trudeau's recent housing announcements are generally drawing praise from experts, political columnist Don Martin argues there shouldn鈥檛 be any standing ovations for a prime minister who helped caused the problem in the first place.
opinion Don Martin: Poilievre has the field to himself as he races across the country to big crowds
It came to pass on Thursday evening that the confidentially predictable failure of the Official Opposition non-confidence motion went down with 204 Liberal, BQ and NDP nays to 116 Conservative yeas. But forcing Canada into a federal election campaign was never the point.
opinion Don Martin: How a beer break may have doomed the carbon tax hike
When the Liberal government chopped a planned beer excise tax hike to two per cent from 4.5 per cent and froze future increases until after the next election, says political columnist Don Martin, it almost guaranteed a similar carbon tax move in the offing.
CTVNews.ca Top Stories
Canadians across the country mark Remembrance Day
Today Canadians will remember and honour the sacrifice of men and women in uniform who gave their lives in service of the country's values and principles.
Trump announces Tom Homan, former director of immigration enforcement, will serve as 'border czar'
U.S. President-elect Donald Trump says that Tom Homan, his former acting U.S. Immigration and Customs Enforcement director, will serve as "border czar" in his incoming administration.
Why brain aging can vary dramatically between people
Researchers are uncovering deeper insights into how the human brain ages and what factors may be tied to healthier cognitive aging, including exercising, avoiding tobacco, speaking a second language or even playing a musical instrument.
Bleeding and in pain, a woman endured a harrowing wait for miscarriage care due to Georgia's restrictive abortion law
Since the U.S. Supreme Court鈥檚 2022 Dobbs decision eliminated the federal right to abortion, miscarriage management has become trickier and in some cases, deadlier.
The union representing some 1,200 dockworkers at the Port of Montreal has overwhelmingly rejected a deal with their employers association.
His wife was swept away by Hurricane Helene鈥檚 floodwaters. Now he鈥檚 been scammed out of nearly US$40,000
Rod Ashby was desperate to find his wife Kim Ashby after their newly built home in Elk Park, North Carolina, was swept away by Hurricane Helene鈥檚 floodwaters in late September and she went missing.
Canadian veterans remember how they eased tensions as UN peacekeepers in ethnically split Cyprus
It was the first time that Canadian UN peacekeeper Michelle Angela Hamelin said she came up against the raw emotion of a people so exasperated with their country's predicament.
'I was called;' Murray Sinclair's life and legacy honoured at emotional memorial
Applause erupted over and over at the Canada Life Centre in Winnipeg Sunday as the son of Murray Sinclair, a former judge, senator and chair of the Truth and Reconciliation Commission into residential schools, spoke about his father.
Children's book by chef Jamie Oliver withdrawn after criticism from Indigenous Australians
A children's book written by British celebrity chef Jamie Oliver has been withdrawn from sale after it was criticized for causing offense to Indigenous Australians.
Local Spotlight
Should Toronto tear up its bike lanes to improve traffic flow? Critics say it's not so simple
A congestion crisis, a traffic nightmare, or unrelenting gridlock -- whatever you call it, most agree that Toronto has a congestion problem. To alleviate some of the gridlock, the Ontario government has announced it plans to remove bike lanes from three major roadways.
For the second year in a row, the 鈥楪ift-a-Family鈥 campaign is hoping to make the holidays happier for children and families in need throughout Barrie.
Some of the most prolific photographers behind CTV Skywatch Pics of the Day use the medium for fun, therapy, and connection.
A young family from Codroy Valley, N.L., is happy to be on land and resting with their newborn daughter, Miley, after an overwhelming, yet exciting experience at sea.
As Connor Nijsse prepared to remove some old drywall during his garage renovation, he feared the worst.
A group of women in Chester, N.S., has been busy on the weekends making quilts 鈥 not for themselves, but for those in need.
A Vancouver artist whose streetside singing led to a chance encounter with one of the world's biggest musicians is encouraging aspiring performers to try their hand at busking.
Ten-thousand hand-knit poppies were taken from the Sanctuary Arts Centre and displayed on the fence surrounding the Dartmouth Cenotaph on Monday.
A Vancouver man is saying goodbye to his nine-to-five and embarking on a road trip from the Canadian Arctic to Antarctica.