Currently, the Government of Canada conducts cyber operations to reduce the ability of foreign cybercriminals to launch ransomware incursions and profit from the sale of stolen information. The Government of Canada is also exploring additional ways to further discourage ransomware payments and impose costs on cybercriminals. This includes improving Canada’s approach to cyber insurance policies to make cybercriminal business models, particularly ransomware, less profitable. The Government of Canada is also committed to working with industry to dissuade businesses from paying ransoms, in accordance with the Counter Ransomware Initiative56 (CRI). In addition, the Government of Canada is committed to bolstering Canada’s national security and law enforcement capacity. One important means of doing so will be education. The Government of Canada will help improve the ability of law enforcement to support victims of cybercrime, using a victim-centric approach. Cybercrime transcends borders and often involves hostile states or organized crime groups. The Government of Canada will continue to collaborate with international allies to impose costs on cybercriminals and disrupt the business model of cybercrime. Reporting is critical to the Government of Canada’s efforts to better understand the cyber threat landscape, disrupt criminal activities and prevent incursions, as well as dismantle cybercriminal infrastructure. The Government of Canada urges those who have been targets of cybercrime to contact their local police services as well as the Canadian Anti-Fraud Centre57 (CAFC). The Government of Canada will be releasing a new cybercrime and fraud reporting system58 so it’s easier for Canadians to report cybercrime and fraud to law enforcement, and for information to be shared amongst law enforcement. Objective 3.3: Make Critical Systems More Resilient Critical infrastructure underpins services Canadians use every day. Critical infrastructure owners and operators are the targets of persistent, well-funded, and sophisticated cyber activities. Malicious cyber actors can inhibit or damage Canadian critical infrastructure, such as water treatment plants, energy grids, pipelines, transportation infrastructure, and agricultural equipment. They can also disrupt essential services, such as healthcare and supply chains, putting the safety, security, and 56 https://www.canada.ca/en/public-safety-canada/news/2023/11/international-statement-counter-ransomware-initiative-jointstatement-on-ransomware-payments.html 57 https://antifraudcentre-centreantifraude.ca/index-eng.htm 58 https://www.rcmp-grc.gc.ca/en/new-cybercrime-and-fraud-reporting-system National Cyber Security Strategy 29