society-wide shift toward shared cyber responsibility. As a first step, the Government of Canada will consider ways it could incentivize organizations to place consumer safety at the core of their operations. The Government of Canada will also consider cyber security certifications and designating trusted companies with preferred Government of Canada contractor status. In addition, the Government of Canada will explore Internet of Things (IoT) labelling to help Canadians easily identify and compare the cyber security protections built into products. This would help consumers, while also making domestic cyber products more attractive. The Government of Canada will also work with international partners to coordinate labelling efforts and obtain reciprocal recognition of Canadian standards. The Government of Canada will continue to work with businesses that provide essential services to improve their cyber security. Notably, the Government of Canada announced the Canadian Cyber Security Certification program27 to enhance cyber security in the defence sector. This will ensure that companies bidding for select Canadian government defence contracts maintain a high level of cyber security. The Government of Canada is collaborating with the U.S. to ensure the certification is compatible with the U.S. Cybersecurity Maturity Model Certification (CMMC), easing the burden on Canadian industry when bidding on U.S. defence contracts. The Government of Canada will consider expanding this program beyond the defence sector. The Government of Canada is also fortifying Canada’s private sector privacy regulations, and establishing new guidelines for the responsible development and deployment of artificial intelligence (AI). The Government of Canada aims to modernize the federal private sector privacy framework, and improve governance of the design, creation, and use of AI. The Government of Canada also continues to update its federal guides and directives on AI28. We must ensure that AI systems are developed safely and in accordance with Canadian values, thereby ensuring that Canadians can have confidence in the digital technologies they interact with daily. The Government of Canada will continue to respond to emerging technologies, including AI, to ensure their responsible and safe adoption in Canada. 27 https://www.canada.ca/en/public-services-procurement/news/2023/05/government-of-canada-helping-defence-industry-protectitself-from-cyber-security-threats.html 28 https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/responsible-use-ai.html 20 National Cyber Security Strategy

Select target paragraph3