Canadian organizations are confronted with an evolving threat landscape as malicious cyber activities increase in scale and sophistication. Critical Infrastructure (CI) operators and owners are especially at risk. Cyber attacks on CI, can have devastating consequences on Canada’s economy, safety and national security.
This page provides resources from the Cyber Centre to help Canadian organizations and critical infrastructure increase their cyber security readiness. This includes information on current cyber threats, steps to protect against them and ways respond to and recover from incidents.
Cyber Security Readiness Goals
The Cross-Sector Cyber Security Readiness Goals (CRGs) provide Canadian organizations with 36 foundational, realistic and achievable goals to strengthen their cyber security. Each goal is linked to concrete recommended actions that, if taken, will elevate the cyber security posture of Canadian organizations and CI .
Consult the Cross-Sector Cyber Security Readiness Goals Toolkit
To accompany these goals, the Cyber Centre has published Cyber Security Readiness Goals: Securing Our Most Critical Systems which provides an overview of the cyber threat landscape and explains how the CRGs came to be. This publication also highlights the CRGs ’ alignment with international frameworks and other Government of Canada publications and tools.
The CRGs are a tool for self-assessment that any organization can use to track their progress and improve their cyber security posture. They will be updated regularly to support organizations in effectively mitigating emerging cyber threats.
Additional resources
- Security considerations for critical infrastructure (ITSAP.10.100)
- Cyber threat bulletin: Cyber Centre reminds Canadian critical infrastructure operators to raise awareness and take mitigations against known Russian-backed cyber threat activity
- Cyber threat bulletin: Cyber Centre urges Canadian critical infrastructure operators to raise awareness and take mitigations against known Russian-backed cyber threat activity
- National Cyber Threat Assessments
- State-sponsored espionage and threats to critical infrastructure
- IT security risk management: A lifecycle approach (ITSG-33)
- Canadian Cyber Security Tool 2.0 (CCST 2.0) (Public Safety Canada)