livelihood of individual Canadians at risk. Moreover, cyber incidents erode trust in the
networks and operating systems in use, as well as in the public and private institutions
responsible for safeguarding personal and sensitive information. The high economic and
societal costs of cyber incidents underscore the importance of securing Canada’s critical
infrastructure.
The Government of Canada has two complementary procedures for when a
cyber incident takes place. First, the Government of Canada Cyber Security
Event Management Plan (GC CSEMP)59 provides a framework to manage
cyber security events that affect, or threaten to affect, the Government of
Canada’s ability to deliver programs and services to Canadians. Second,
the Federal Cyber Incident Response Plan (FCIRP)60 is a coordination plan
and information-sharing framework for when the Government of Canada is
responding to significant cyber incidents affecting non-Government of Canada
systems that are essential to the health, safety, security, defence, or economic
well-being of Canadians.
The Government of Canada recognizes the importance of working collectively to
strengthen Canada’s critical infrastructure to deter cyber threats. Canada’s critical
infrastructure is owned and managed by a variety of organizations, so all levels of
government together with private industry must collaborate to ensure that information,
operational technology, industrial control systems, and software supply chains are secure.
The Government of Canada will continue working with partners and industry
stakeholders as part of the Global Coalition on Telecommunications61 to foster diverse
supply chains as well as secure and interoperable standards in the telecommunications
sector. The Government of Canada will also support the work done by cyber security
organizations and forums, such as the Canadian Internet Registration Authority (CIRA)
Canadian Shield62, Rogers Cybersecure Catalyst63, Canadian Cyber Threat Exchange64
(CCTX), and CANARIE65. In the future, the Canadian Cyber Defence Collective (CCDC)
will also serve as an important forum for critical infrastructure discussions across
sectors.
59 https://www.canada.ca/en/government/system/digital-government/online-security-privacy/security-identity-management/
government-canada-cyber-security-event-management-plan.html
60 https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/fdrl-cbr-ncdnt-rspns-pln-2023/index-en.aspx
61 https://ised-isde.canada.ca/site/ised/en/global-coalition-telecommunications-joint-statement-intent
62 https://www.cira.ca/en/canadian-shield/
63 https://cybersecurecatalyst.ca/
64 https://cctx.ca/
65 https://www.canarie.ca/
30
National Cyber Security Strategy