Question Period Note: International Cyber Security

Canada's position on increasing cyber security threats internationally and their impact on Canadians as well as Canada's diplomatic relationships.

• Cyber risks and threats are international in scope and require an international response. Canada works closely with partners and allies around the world at the United Nations and other international forums to find common solutions to our shared threats.
• Canada's Indo-Pacific Strategy noted the cyber security threats originating in the region, including activity targeting businesses and infrastructure. To deepen our cooperation and help address these threats, Canada is increasing our diplomatic presence with experts this summer.
• Canada is an advocate for the Framework of Responsible State Behaviour in Cyberspace and is careful in its own actions to respect the Framework. This includes respect for international law and voluntary norms and providing capacity building assistance.
• The Government of Canada deals with ongoing and persistent cyber risks and threats every day. We take appropriate steps to protect our systems and mitigate these threats. If we find malicious activity, we take action to stop it.

The Framework for Responsible State Behaviour in Cyberspace is a voluntary framework of behaviour adopted by States. It stems from work at the UN over several years to ensure international stability in cyberspace. The Framework includes the public acknowledgement that international law applies in cyberspace, adherence to the 11 voluntary and non-binding norms of behaviour endorsed by the UN General Assembly, and a commitment to cyber security capacity building.

Canada has been public about international law applying to cyberspace for several years and published its views on the specifics of that application in 2022. Canada is an active participant at the UN Open Ended Working Group that deals with activity in cyberspace, as well as in regional organizations such as the Organization for Security and Cooperation in Europe (OSCE) that have confidence building measures related to cyberspace. Canada has contributed approximately $30 million to capacity building in the past 10 years.

Federal Budget 2024 noted a Key Ongoing Action of $4.4 billion over 20 years to enhance Canada's cyber security by expanding our cyber operations capability and shoring up critical infrastructure to fend off malicious cyber activity.

This includes the commitment in Canada's updated defence policy, Our North Strong and Free, of $917.4 million over five years, starting in 2024-25, for enhancing Canada's intelligence and cyber operations programs to protect Canada's economic security and respond to evolving national security threats.

Canada's Indo Pacific Strategy included $47.4 million over 5 years for the Cybersecurity and Digital Technology Diplomacy initiative. This is a new multi-department initiative to develop Canada's cyber diplomacy in the Indo-Pacific. Canada will help develop cyber security capacity in select partner countries while increasing regional engagement on cyber issues and strengthening partnerships through the deployment of dedicated cyber attachés.

None