The role of cybersecurity in modern warfare

Prime Minister Justin Trudeau recently drew a comparison between attacks on Canada's physical infrastructure and our nation’s assistance to Ukraine. Cyberspace and international borders have been breached by modern warfare in Ukraine, jeopardizing Canadian military systems, infrastructures supporting national security, and businesses. Although there are no active conflicts within Canadian borders, the country’s security is based on private infrastructure, which has already seen catastrophic calamities. Building on cybersecurity strengths and tackling weak spots When it comes to cybersecurity, Canada has two important advantages. For one, the National Cybercrime Coordination Unit and the Canadian Centre for Cyber Security were both formed under the 2018 Cyber Security Strategy. Secondly, with revenues of more than $3.2-billion and 29,000 jobs in 2020, the Canadian cybersecurity sector represents a significant economic driver for our nation. Yet Canada must continue to strengthen its legal system to confront new cyber threats. Released in 2004, the National Security Strategy of Canada could benefit from an update that would offer the necessary comprehensive and up-to-date national security framework that could both simplify the complex missions of the organizations supporting national security and foster greater public-private cooperation. Cross-sector collaboration is key to mitigating current and future risks To enable the sharing of intelligence and the improved coordination of cyber crises and occurrences, our cyber ecosystem requires strong collaboration and information-sharing agreements with the commercial sector, other countries, and all its jurisdictions (federal, provincial, and local). As a first step toward achieving this goal, the Security of Canada Information Disclosure Act (SCIDA) was passed in 2019 to increase information sharing across government institutions and agencies with established national security missions (SCIDA excludes sharing of information with federal, state, local, or commercial sector partners). Another piece of legislation, C-26, which obtained royal approval in December 2022, will further improve incident response capabilities, and increase cooperation between government agencies and commercial businesses to lessen the effects of cyber disasters and promote efficient recovery. Additionally, C-26 will set the stage to make critical infrastructure cyber defences even stronger. Evolving our laws and focusing on design to tackle emerging threats Despite these gains, legislative and accountability gaps remain, especially given the onset of new participants in fields where governments have historically assumed the lead, including cyber defence. The worldwide internet traffic passing through the servers of data giants like Google, Microsoft, and Amazon Web Services is closely monitored on an ongoing basis, with violators removed at an increasing pace. Emerging digital technologies are improving our way of life, and Canada's practical approach to cybersecurity need to be updated to reflect the sector’s rapid evolution. Notably, whereas digital systems demand security by design, Canada's cybersecurity regulations are still mostly dependent on controls. Establishing trust cannot wait until the system is put together; rather, it must start early in the supply chain. Security by design is a lifecycle approach that goes beyond delivery and is continuous. This calls for new standards and new ways of evaluating how commercial entities apply security. Ethically harnessing the power of technology to battle cyber attacks Artificial intelligence (AI) and machine learning (ML), which are digitally native systems, have already enhanced cyber threat identification, automated security procedures, and raised the accuracy and speed of incident response. The Artificial Intelligence and Data Protection Act, proposed by Canada, will impose privacy protection requirements on AI and ML. However, the development of AI and ML systems that prevent prejudice is a rising source of worry. As a result, these technologies will need accountability and ethical frameworks. The usage of data by enabling systems like ChatGPT raises concerns about where the information goes and who uses it, as well as the requirement for objectivity when these systems are used in the context of government or national security. Entrusting the sources of data and where the data is being used is a starting point to build trust, building the knowledge to properly query the data will also be needed. Driving impactful results by investing in people and skills To tackle these emerging and complex challenges, all parties involved in our nation’s cybersecurity ecosystem must make significant investments in workforce development, education, and training to nurture a strong pipeline of cyber talent. All levels of the workforce require cybersecurity education programs as well as specialized instruction, certification, and practical experience. Furthermore, government, higher-learning institutions, and businesses can collaborate to offer students more hands-on learning, apprenticeships, and co-op opportunities. These initiatives can contribute to closing the skills gap and developing a strong workforce to handle the changing cybersecurity issues. To keep up with emerging threats and to help increase the accuracy and speed of incident responses, cybersecurity tools and technologies will always evolve. With an efficient legislative framework, Canada's national security organizations, combined with its strong domestic commercial capabilities, can establish and maintain efficient systems to recognize and stop cyberthreats, defend against cyberattacks, react quickly to incidents, and train a strong workforce to support it all. Caroline Cameron is a director at Deloitte Canada. Until recently, she was head of the Joint Defence Cloud Program at the Department of National Defence. She formerly worked at the Communications Security Establishment, where she oversaw the introduction of digital secure communication, the Canadian government's response to cyber incidents, and supply. The Hill Times

The role of cybersecurity in modern warfare

Canada must continue to strengthen its legal system to confront new cyber threats.

Most Armenians say they don’t expect ever to go home again

If Allies back away, Ukraine is at risk of losing the war

Reconciliation is an empty word if Indigenous people are left in landfills

Just what we need: another national unity crisis

Trudeau’s horrible summer

Complacency is our enemy today, bold thinking is our future

Bridging the gap between public safety and mental health

We’ll bring the fiddle

Canada-U.S. intelligence relationship resilient enough to withstand a second Trump presidency, experts say

Politics This Morning: Divisions remain after Truth and Reconciliation events

‘Woefully inadequate’ funding spurs association’s calls for fulfilled mental health transfer

Careless vetting provides history lesson for the ages

A perfect storm for mental health needs and care in the economic downturn

News

Get free news updates

Opinion

Submit a guest opinion article

resources

Advertise

subscribe

get help

The role of cybersecurity in modern warfare

Canada must continue to strengthen its legal system to confront new cyber threats.

Get The Policy Briefings Newsletter