THE ROLE OF CYBER SECURITY IN

DIGITAL TRANSFORMATION

Imraan Bashir, Senior Director, Cyber Security Treasury Board of Canada Secretariat

COUNTERMEASURE 2018

DIGITAL TRANSFORMATIONMORE THAN JUST DIGITIZING ANALOG MATERIAL

TRANSFORMING GOVERNMENT SERVICESVISION FOR GOVERNMENT AS A PLATFORM

Any deviceSmart phones, TVs, cars,

personal AI assistants (Alexa, Google Assistant, Cortana, etc.)

Any partnerProvinces, private sector,

academia, non-profits, open source communities, etc.

Any servicePassport renewal, filing taxes, collecting social

benefits, etc.

Any platformFacebook, Google,

LinkedIn, Expedia, etc.

“We can’t be a Blockbuster government when we’re serving a Netflix citizenry.” – The Honourable Scott Brison, President of the Treasury Board

Banks

TRUST IS FOUNDATIONALCYBER SECURITY MUST BE PRIORITIZED

BUT FIRST…WE MUST CHANGE THE PERCEPTION

UNINFORMED SECURITYUSERS WILL FIND A WAY

STOP THE BLAME GAME

LESSONS FROM OTHER INDUSTRIESEXAMPLE: EVOLUTION OF THE TABLE SAW

STOP SAYING “NO”BECOME THE ENABLING JEDI

ONE SIZE DOESN’T FIT ALL

?

TOO MUCH?TOO LITTLE? JUST RIGHT

FINDING THE RIGHT SIZE

SECURITY = RISK MANAGEMENT

ENGAGE EARLY, ENGAGE OFTEN

GOVERNMENT OF CANADA

PRIORITIES

PUBLIC CLOUD

Cloud-first policy

Baseline security control profile

Cloud Adoption Strategy

Procurement vehicles

#GCCLOUDFIRST

DIGITAL IDENTITY

Pan-Canadian Trust Framework

Pilots with other jurisdictions (provinces, banks)

Vision and Strategy Paper

SEAMLESS, TRUSTED ACCESS TO ONLINE SERVICES

#PRAGMATICSECURITY

Open access to web services

Password Guidance

HTTPS Everywhere

MAKING SECURITY USABLE

BAKING SECURITY INFROM THE BEGINNING

Governance

Enterprise architecture

DevSecOps

Automation

INCIDENT RESPONSEASSUME BREACH AND PLAN ACCORDINGLY

Cyber Security Event Management Plan

Preparation and Exercising

Post-mortems and Continuous Improvement

GOVERNMENT OF CANADA

CHALLENGES

LEGACY DEBT

RAPIDLY-CHANGING TECHNOLOGY

TALENT SHORTAGE

WE’RE ALL IN THIS TOGETHER

Imraan Bashir, Senior Director, Cyber Security Treasury Board of Canada Secretariatimraan.bashir@tbs-sct.gc.cazztbscybers@tbs-sct.gc.ca

@ibash_10

THANK

YOU!