Advancing cyber security in Ontario’s broader public sector
A guest post by John Roberts, Chief Privacy Officer and Archivist of Ontario.
Editor’s Note: John Roberts is the Chief Privacy Officer and Archivist of Ontario, and since May 2020, acting Chief Information Security Officer (CISO) at the Ministry of Government and Consumer Services. We’ve asked him to share more about:
- The work of the Cyber Security Division;
- Ontario’s first virtual conference, Keeping Pace, which Julia Le blogged about in September; and
- A new cyber security learning opportunity available to Ontario’s broader public sector.
Great online services depend on secure digital interactions. As the use of digital platforms grows, so does the risk of potential security and privacy breaches. Organizations need strong cyber security programs to protect against unauthorized access to sensitive information.
Ontario’s Cyber Security Division provides essential government-wide cyber security services, including managing cyber risks by predicting, identifying, and addressing threats to information security. We ensure that the Ontario government operates securely and meets its digital service commitments while protecting the personal and private information of Ontarians.
Our work is guided by the Cyber Security Strategy, which was approved by our government in 2019.
This strategy lays out the framework to modernize Ontario’s cyber security program, with three focus areas:
1. Enhance collaboration across government and the broader public sector;
2. Ensure the continued security of government applications; and
3. Protect the sensitive data entrusted to us.
As part of the Cyber Security Strategy, we established Ontario’s first Cyber Security Centre of Excellence to help the province’s broader public sector with cyber security challenges. The Centre works closely with ministries and broader public sector organizations to increase cyber resilience across the province.
If you are from a broader public sector organization in Ontario, you can access our services, including:
· A Community of Practice
· Alerts and advisories
· A Vendor of Record program
· Education and awareness materials
· Upcoming webinars and conferences
· Online learning modules
Keeping Pace: Cyber Security in Ontario’s Public Sector
On October 1, the Cyber Security Centre of Excellence hosted our first-ever cyber security virtual conference. Keeping Pace: Cyber Security in Ontario’s Public Sector focused on the cyber security measures broader public sector organizations need to implement to keep pace in an environment of rapidly evolving threats and increasing demand for digital public services.
We had more than 800 people registered for the full-day conference that kicked off Cyber Security Awareness Month.
The recorded conference sessions are available to anyone who wishes to view them at cybersecurityontario.ca.
I would like to acknowledge and thank Minister Lisa Thompson for her leadership when it comes to cyber security in the Ontario government and the broader public sector.
Online cyber security learning modules
During Cyber Security Awareness Month, we launched free online training modules on foundational cyber security topics for the broader public sector. Ontario’s cyber security learning portal is located on cybersecurityontario.ca.
You will find learning modules for business continuity planning, breach procedures, incident management planning, and user account management & password controls. In the coming months, we’ll introduce learning modules on topics including vulnerability management, information sensitivity classification, and IT asset management.
Final thoughts
The importance of cyber security cannot be understated in the times we live in. Organizations have worked hard to adapt to the changes COVID-19 has brought to our workplaces. As remote work becomes more common, we need to think carefully about how to enable a secure remote workforce.
Cyber Security is everyone’s responsibility. It is important for each of us to do our part in successfully fending off cyber security threats. Whether you work in a technology-focused role or use technology to perform your work, cyber security is a literacy that helps us stay safe in a digital world. Together, we can ensure that our data and our personal and private information remain cyber secure.
