society-wide shift toward shared cyber responsibility. As a first step, the Government of
Canada will consider ways it could incentivize organizations to place consumer safety
at the core of their operations. The Government of Canada will also consider cyber
security certifications and designating trusted companies with preferred Government of
Canada contractor status.
In addition, the Government of Canada will explore Internet of Things (IoT) labelling
to help Canadians easily identify and compare the cyber security protections built into
products. This would help consumers, while also making domestic cyber products
more attractive. The Government of Canada will also work with international partners to
coordinate labelling efforts and obtain reciprocal recognition of Canadian standards.
The Government of Canada will continue to work with businesses that provide essential
services to improve their cyber security. Notably, the Government of Canada announced the
Canadian Cyber Security Certification program27 to enhance cyber security in the defence
sector. This will ensure that companies bidding for select Canadian government defence
contracts maintain a high level of cyber security. The Government of Canada is collaborating
with the U.S. to ensure the certification is compatible with the U.S. Cybersecurity Maturity
Model Certification (CMMC), easing the burden on Canadian industry when bidding on
U.S. defence contracts. The Government of Canada will consider expanding this program
beyond the defence sector.
The Government of Canada is also fortifying Canada’s private sector privacy
regulations, and establishing new guidelines for the responsible development and
deployment of artificial intelligence (AI). The Government of Canada aims to modernize
the federal private sector privacy framework, and improve governance of the design,
creation, and use of AI. The Government of Canada also continues to update its
federal guides and directives on AI28. We must ensure that AI systems are developed
safely and in accordance with Canadian values, thereby ensuring that Canadians can
have confidence in the digital technologies they interact with daily. The Government of
Canada will continue to respond to emerging technologies, including AI, to ensure their
responsible and safe adoption in Canada.
27 https://www.canada.ca/en/public-services-procurement/news/2023/05/government-of-canada-helping-defence-industry-protectitself-from-cyber-security-threats.html
28 https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/responsible-use-ai.html
20
National Cyber Security Strategy