Cybersecurity is national security, panelists tell IIC

OTTAWA–The government’s cybersecurity legislation, Bill C-26, is necessary and timely, a panel told a conference Monday. The International Institute of Communications Canadian Chapter featured a session entitled “Bill C-26 and cybersecurity”. Moderator Ian Scott, former chair of the CRTC, reminded delegates of a quote Public Security Minister Marco Mendacino made when the bill was introduced last year. The Liberal MP declared that cybersecurity is national security. One panelist took it a step further. “Cybersecurity really is a national security issue, but it’s also an economic security issue, it’s also a health security issue as well,” Kristen Csenkey of Wilfrid Laurier University’s Balsillie School of International Affairs offered. Another speaker, Alexandra Quigley of Dentons Montreal office, gave an outline of what the legislation is meant to cover. She said it will keep watch over vital infrastructure systems such as pipelines and water systems. Other essentials could be added to the bill if needed, she speculated. The threats are real. “The impacts can be very serious. It can target water treatment systems,” Alexis Rapin of the Université du Québec à Montréal explained. “We have seen examples of this in Israel, Iran targeted Israel and its water treatment systems. It can target the electric grid, we have seen a few examples of this in Ukraine.” Rapin said there are three main threats in cyberspace these days. First is cyber espionage, which carries a high probability rate but a low impact. Next is ransomware, with high probability and medium impact. Lastly is state-sponsored cyber attacks, which has a low probability but the highest impact. The vice-president of community investment, policy and advocacy for the Canadian Internet Registration Authority (CIRA) said one of those threats is gaining ground. “In our last cybersecurity survey, we saw one in five businesses telling us that they were victims of ransomware and about 70 per cent or more actually paid the ransomware with the minimum being about 25K and then up,” Charles Noir told delegates. “It is pretty bad out there and we think that this bill will go a long way to improving that posture and improving trust in the internet,” he added. CIRA, which administers the “.ca” domain, says one-third of the internet is touching its system every day. About eight million people are covered by services which CIRA provides. All four panelists were enthusiastic about the proposed new law. “There’s also some very interesting enforcement powers for the regulatory authorities under the proposed act,” Quigley noted. “These include internal audits, compliance orders, entering into compliance agreements and the power to issue administrative monetary penalties.” “I see this bill really about establishing trust,” Csenkey stated. “Establishing trust between users and private sector operators, between supply chains, internal government departments, ministries as well as building trust with our international allies.” Rapin warned users to make themselves aware of the dangers and react accordingly. He cited a case in Florida where a system was hacked because the customer was using the Windows 7 operating system. Most people do not know who to report a cyber attack to. Users are skeptical because they don’t see the dangers. Noir said CIRA is calling for the legislation to be strengthened by allowing for better oversight, better information sharing and more transparency. He worried how authorities could react to a major attack without revealing their playbook to the assailants. There is also a question of balancing security with civil liberties. –Reporting by Paul Park at ppark@thewirereport.ca and editing by Michael Lee-Murphy at mleemurphy@thewirereport.ca

Cybersecurity is national security, panelists tell IIC

News | May 16, 2023

Unlock all the Canadian telecom, broadcasting and digital media news you need.

FREE TRIAL

SUBSCRIBE

Inside The Wire Report

Information

Hill Times Publishing

Get in Touch With Us

Cybersecurity is national security, panelists tell IIC

News | May 16, 2023

Unlock all the Canadian telecom, broadcasting and digital media news you need.

FREE TRIAL

SUBSCRIBE

Related Stories

CRTC launches Streaming Act consults on CanCon definition, radio regulations

Rogers, Cogeco, Eastlink ask CRTC to block Big Three from wholesale access

CRTC opens door to participation funds for Online News Act

CRTC planning consult on cabinet order that it revisit blocking Big Three’s wholesale access to fibre in Ontario, Quebec

Reuse & Permissions

Inside The Wire Report

Information

Hill Times Publishing

Get in Touch With Us