Here’s how Canada can prepare for Russia-backed cyberattacks

Russia’s war on Ukraine has critical infrastructure operators around the world on red alert. As tensions rise, IT professionals everywhere are bracing for Kremlin-backed cyberattacks. But while hackers use new tactics to wreak havoc abroad, here in Canada, old vulnerabilities lie dormant in some of our most important networks. Earlier this year, the Canadian Internet Registration Authority (CIRA) detected a huge spike in malicious traffic inside the network of a critical infrastructure operator with an extensive Internet of Things (IoT) network. The culprit was the notorious Mirai Botnet—a six-year-old form of malware that attacks vulnerable IoT and smart devices. Mirai was actually responsible for one of the largest cyberattacks in history back in 2016. Thankfully, our DNS Firewall service was able to help this organization stop the bad traffic at its source. Otherwise, the attack could have interrupted the lives of millions of Canadians. Dormant vulnerabilities exist across the country, and many of them are not new—in fact, in “internet years,” many are practically geriatric. But each is a ticking time bomb ready to go off if the right bad guy finds them. Of course, technological land mines are not the only problem; changes in business operations, like the pivot to hybrid and remote work, also increase cyber risks. Over the summer, CIRA surveyed more than 500 information technology (IT) and cybersecurity decision-makers from organizations across the country. The results were eye-opening. Half (50 per cent) of the organizations we polled said they have a hybrid work environment, and a similar number (55 per cent) said they felt their organization was more vulnerable to cyber threats as a result. Other findings from our survey appear to support this. For example, the number of security breaches in Canadian organizations has nearly doubled from 18 per cent to 29 per cent since the pandemic began in 2020. It’s easy to focus on technological vulnerabilities, but, all too often, human beings are the weakest link in an organization's cybersecurity defences. That’s why experts recommend that companies invest in cybersecurity awareness training for their staff. Creating a corporate culture of cyber awareness is not a one-and-done. It requires frequent refreshers and an updated curriculum as new threats emerge. Unfortunately, our survey found that most organizations (87 per cent) only conduct cybersecurity awareness training quarterly or less. Increasing the frequency of training will go a long way towards protecting organizations. With threats on the rise, many are wondering how the federal government can help. During Public Safety Canada’s recent consultation on the National Cyber Security Strategy, we recommended a handful of steps the government can take. First, government agencies can and should provide threat intelligence data to trusted cybersecurity service providers to raise the baseline level of cybersecurity across the country. Increased collaboration will boost our ability to head off threats before they interrupt Canadians’ lives. Second, the government should continue to fund the adoption of cybersecurity technologies for organizations of all types, like they do with the Canada Digital Adoption Program (CDAP). We know from our own work that underfunded IT departments are one of the greatest cyber threats facing the public sector and other institutions. That’s why CIRA supports the continuation of the CDAP and wants to see other programs targeting important sectors like critical infrastructure. Third, the government must work to educate individual Canadians on the cyber risks they face and practical approaches to mitigate these. The Canadian Centre for Cyber Security is producing excellent materials, and we’d like to see them in the hands of as many people and organizations as possible. Finally, the government should establish a “Canadian Internet Observatory”—an independent think tank dedicated to promoting infrastructure resiliency. There is no single body in Canada tasked with studying the topography of Canada’s networks, nor the risks of internet infrastructure failure at the national level—be it from cyberattacks or natural disasters. The observatory would monitor the effects of network failures, cyberattacks, and other threats to resilience. As the volume of cyberthreats and geopolitical tensions continue to rise, the National Cyber Security Strategy is a golden opportunity to bolster the security of Canada’s networks and ensure that our critical infrastructure operators are ready for cyber offensives no matter where they come from. Byron Holland is president and chief executive officer of the Canadian Internet Registration Authority. The Hill Times

Here’s how Canada can prepare for Russia-backed cyberattacks

It’s easy to focus on technological vulnerabilities, but, all too often, human beings are the weakest link in an organization's cybersecurity defences.

New cyber bill requires careful finessing

How can the federal government increase the cybersecurity of small and medium-sized businesses?

Cybersecurity expert says he’s confident MPs are receiving proper guidance on cyber threats

New cyber bill requires careful finessing

New energy era, new rules needed to develop responsible projects

ZEV sales targets must ride alongside infrastructure commitments

A new Harperian strategy?

Reflections on a president’s visit, gender equality and the road to reconciliation

Canada must seize its strategic advantage in the global genomics race

New cyber strategy must tackle chronic talent shortage

Escalating Russian cyber attacks could risk widening the war in Ukraine

On cybersecurity, we must truly work together

Is Canada prepared for advanced cyberattacks?

Canada is not immune to cyberattacks

News

Get free news updates

Opinion

Submit a guest opinion article

resources

Advertise

subscribe

get help

Here’s how Canada can prepare for Russia-backed cyberattacks

It’s easy to focus on technological vulnerabilities, but, all too often, human beings are the weakest link in an organization's cybersecurity defences.

Get The Foreign Policy and Diplomacy Newsletter