Canada’s cybersecurity gap needs to be addressed now

Canada faces an escalating wave of cyber threats that directly endanger the critical infrastructure and essential services we rely on every day. From the disruption of municipal services as seen in Hamilton, Ont., to delayed medical treatments due to ransomware attacks on hospitals to the billions of dollars lost by Canadians because of cyber-enabled fraud, we find ourselves confronting the realities of a sophisticated cyber dark-age with insufficient defences. That’s not to say we aren’t making some progress in correcting this alarming situation—there have been strides recently in securing federally regulated sectors like banking, transportation, telecommunications, and energy transmission; as well as the Government of Canada’s announced funding for boosting the cyber resilience of critical infrastructure, including government departments. But these measures alone are not enough. Especially since Canada’s cybersecurity ecosystem resembles a medieval castle: robustly protecting the government inside, but leaving the broader domain of provinces, municipalities and businesses vulnerable. Passing Bill C-26 this spring and refining its regulations over the next year has never been more critical. However, this legislation is only part of the work needed to address Canada’s cybersecurity gap. Effective defence against cyber threats requires robust two-way communication between government agencies and the private sector. Currently, barriers—chief among them concerns over privacy and legal repercussions—inhibit this essential exchange. Government can incentivize the private sector to share threat data by offering legal protections, financial rewards, and enhanced cybersecurity support. Such offerings will not only foster greater participation by business, but also promote digital trust and ensure that both public and private sectors can respond to threats with agility and co-ordinated precision. Improved collaboration will prevent cyber criminals from exploiting the weaknesses in our patchwork of regulations and outpacing our defensive efforts. A national summit on ransomware is one example of taking a proactive step towards uniting stakeholders against this pervasive threat, and setting a strategic agenda to bolster Canada’s digital defences. Alongside increased collaboration, we also need to continue advancing cybersecurity in national discourse and through intergovernmental work with provinces and municipalities. Elevating the parliamentary secretary for cybersecurity to a cabinet-level position would be a declaration from Canada that cybersecurity is a top government priority, crucial for our national interest. A full-seat cabinet role would mean improved resources, streamlined decision-making, a clear mandate for rapid action, and accountability for collaboration and coordination—all the necessary measures for strengthening our cybersecurity posture, and safeguarding the digital economy upon which Canadians are increasingly dependent. However, no cybersecurity defence strategy would be complete without measures to empower small and medium-sized enterprises (SMEs) with the resources and capabilities to fend off cyber-attacks. Making up 98 per cent of all businesses, SMEs are the backbone of our economy, yet many lack the financial resources and expertise to effectively respond to cyber threats, making them easy targets. By redirecting funding from lower-priority government spending to a dedicated SME Cyber Defence Fund, Canada can help SMEs improve their cyber resilience, and close the cybersecurity investment gap. The stakes are high. The time for decisive action is now. If Canada is to have a hope of surpassing or at least catching up to cyber criminals—and our allies—we need to move from fragmented and reactive to unified and proactive. Through an updated national cybersecurity strategy that includes robust information-sharing mechanisms, increased collaboration, and coordination between government and private sector, a full cabinet position and help for SMEs, we could safeguard our economy and enhance the prosperity of all Canadians. Bill C-26 is a starting point, but should be viewed as the foundation upon which we build a more resilient cybersecurity framework and national strategy that is inclusive of all Canadians. And while we’re at it, why not also position ourselves as a leader in global cybersecurity efforts? Ulrike Bahr-Gedalia is the senior director of Digital Economy, Technology and Innovation at the Canadian Chamber of of Commerce, and council lead of the chamber's 'Cyber. Right. Now.' campaign. David Shipley is the CEO of Beauceron Security, and council co-chair of 'Cyber. Right. Now.' The Hill Times

Canada’s cybersecurity gap needs to be addressed now

Effective defence against cyber threats requires robust two-way communication between government agencies and the private sector.

Canada’s aging crisis and a call for reform in eldercare

Canada is still climbing the mountain, but Murray Sinclair showed us the path forward

Trump’s win is bad for news for Trudeau

When the pendulum swings: how does the public service respond to political polarization?

Canada goes Swiftie

Nightmare on Pennsylvania Avenue

Space systems are too important to leave unprotected against cyber attack

Recent cyber-attacks show that we need to get on with Bill C-26

Cybersecurity needs faster, seamless public-private collaboration, say cyber experts

Improving Bill C-27, and fighting cyber threats facing Canada

Safeguarding national security and protecting critical infrastructure is an urgent priority

News

Get free news updates

Opinion

Submit a guest opinion article

resources

Advertise

subscribe

get help

Get free news updates

Submit a guest opinion article

Canada’s cybersecurity gap needs to be addressed now

Effective defence against cyber threats requires robust two-way communication between government agencies and the private sector.

Get The Policy Briefings Newsletter