Security and Resilience the threat is to the computer systems that underpin government systems, critical infrastructure, and democratic institutions. Terrorist organizations are also interested in acquiring advanced cyber tools to conduct attacks. The Growing Impact As malicious cyber tools become increasingly accessible and as rates of cybercrime continue to rise, there is a real threat to Canada’s economic well-being. Furthermore, as more of Canada’s critical infrastructure can CYBER SECURITY SNAPSHOT: EMAIL SCAMS be controlled remotely and essential services are managed online, cyber incidents have the potential to compromise national security and It’s tax season and Mohsen recently filed his public safety. taxes online. A few days later, he receives an email from someone claiming to be a From a financial perspective, victims of cyber compromise face immediate tax official, informing him that there is costs to recover and restore their systems. They also face long-term costs information missing from his file. The official to replace or upgrade cyber systems, as well as untold reputational costs. makes an urgent request for additional personal information to complete his file, While start-ups are particularly vulnerable, the loss of intellectual property including his address and social insurance has contributed to financial ruin for businesses of all sizes. number. The email notes that failure to provide this information could lead to steep Cyber incidents can also be profoundly destabilizing. They can erode penalties and even jail time. Mohsen feels trust in e-commerce and government institutions and can lead people to suspicious about the email, and so before question their continued use of digital technologies if they feel that their safety or privacy is at risk. providing the information, he checks the Canada Revenue Agency (CRA) website. He reads that the CRA would never send emails The internet-of-things (IoT) refers to objects and devices that are connected to the internet to communicate with one another and provide asking individuals to divulge personal or financial information. He follows the CRA’s advice by ignoring the email. 14 of 35 • NATIONAL CYBER SECURITY STRATEGY