Cyber Defence

The Communications Security Establishment (CSE) provides advice, guidance and services to help ensure the protection of electronic information and of information infrastructures of importance to the Government of Canada (GC).  This is Part B of CSE’s mandate under the National Defence Act.

To achieve this, CSE has internationally recognized cyber and technical expertise which enables us to respond to threats and attacks against Government of Canada computer networks and systems, and the important information they contain. Cyber Defence leads these efforts.   

Cyber Defence helps protect GC systems from foreign states, hackers, and criminals. We track threats from around the world, monitor government networks to detect cyber threats, and work with government departments to defend and strengthen systems that have been compromised. We help protect information of value to the government, including personal information, from theft.

Finally, Cyber Defence plays a critical role in the implementation of Canada’s Cyber Security Strategy, which has three objectives:

  1. Securing government systems;
  2. Working with the private sector and governments to protect critical infrastructure; and
  3. Helping Canadians to be secure online.
Top 10 Mitigation Strategies

How are Canadian networks at risk?

Cyber threats — including foreign states, hacktivists, criminals, and terrorists — continually probe government systems, looking for vulnerabilities in order to gain access to a computer. Once they have access, threat actors can steal or distort the information stored on it, corrupt its operations or program it to exploit other computers and the systems to which it is connected.

Government networks are an attractive target for adversaries for many reasons:

  • They house information about the ways in which our government operates.
  • They hold trade secrets, intellectual property and valuable data related to our economy.
  • They are crucial in protecting the lives of our foreign service, military and law enforcement personnel.
  • They contain the personal information of Canadians who rely on these networks for access to government services such as tax returns, employment insurance and passports—information that needs and deserves to be protected.

Cyber-incidents against Government of Canada systems have happened before. In 2011, the systems of Finance Canada and the Treasury Board Secretariat experienced unauthorized cyber intrusions. CSE worked with both departments to limit the damage, and address the vulnerabilities in their systems. The result: more robust, secure systems, and better protected information.

Government of Canada networks by the numbers:

  • More than 57,000 servers
  • 9,000 internet connections
  • Accessed by over 377,000 public servants and millions of Canadians

Canadian networks need to be secured from adversaries and the Government of Canada must protect personal information. Securing these systems is not simply a matter of operational efficiency; it is a matter of national security, sovereignty and privacy protection.

How does CSE defend Canadian networks?

CSE’s Cyber Defence role in ensuring cyber security includes the following:

  • Securing government networks. Every day, thousands of attempts are made to access and infiltrate government networks. CSE works with departments like Shared Services Canada (SSC) —a government department that provides computer network services and support to other Government of Canada departments—to detect those attempts, block them and repair any damage. We make sure the government’s networks are among the most secure in the world.
  • Defending against cyber threats with advanced knowledge. CSE uses our foreign signals intelligence capabilities and information from our allies to better understand the people and organizations who are trying to exploit our systems and the techniques they try to use. We also learn as much as we can about evolving cyber threats, and the best ways to detect and prevent them. With this knowledge, CSE is better positioned to stop nefarious cyber activities and intrusions before they reach our networks, and your information.
  • Helping protect critical systems of other levels of government and the private sector. With our in-depth expertise and knowledge, we work with Public Safety Canada and computer networks and systems operated by other levels of government and the private sector to protect vital computer networks that Canadians rely on.