THE ROLE OF CYBER SECURITY IN
DIGITAL TRANSFORMATION
Imraan Bashir, Senior Director, Cyber Security Treasury Board of Canada Secretariat
COUNTERMEASURE 2018
DIGITAL TRANSFORMATIONMORE THAN JUST DIGITIZING ANALOG MATERIAL
TRANSFORMING GOVERNMENT SERVICESVISION FOR GOVERNMENT AS A PLATFORM
Any deviceSmart phones, TVs, cars,
personal AI assistants (Alexa, Google Assistant, Cortana, etc.)
Any partnerProvinces, private sector,
academia, non-profits, open source communities, etc.
Any servicePassport renewal, filing taxes, collecting social
benefits, etc.
Any platformFacebook, Google,
LinkedIn, Expedia, etc.
“We can’t be a Blockbuster government when we’re serving a Netflix citizenry.” – The Honourable Scott Brison, President of the Treasury Board
Banks
TRUST IS FOUNDATIONALCYBER SECURITY MUST BE PRIORITIZED
BUT FIRST…WE MUST CHANGE THE PERCEPTION
UNINFORMED SECURITYUSERS WILL FIND A WAY
STOP THE BLAME GAME
LESSONS FROM OTHER INDUSTRIESEXAMPLE: EVOLUTION OF THE TABLE SAW
STOP SAYING “NO”BECOME THE ENABLING JEDI
ONE SIZE DOESN’T FIT ALL
?
TOO MUCH?TOO LITTLE? JUST RIGHT
FINDING THE RIGHT SIZE
SECURITY = RISK MANAGEMENT
ENGAGE EARLY, ENGAGE OFTEN
GOVERNMENT OF CANADA
PRIORITIES
PUBLIC CLOUD
Cloud-first policy
Baseline security control profile
Cloud Adoption Strategy
Procurement vehicles
#GCCLOUDFIRST
DIGITAL IDENTITY
Pan-Canadian Trust Framework
Pilots with other jurisdictions (provinces, banks)
Vision and Strategy Paper
SEAMLESS, TRUSTED ACCESS TO ONLINE SERVICES
#PRAGMATICSECURITY
Open access to web services
Password Guidance
HTTPS Everywhere
MAKING SECURITY USABLE
BAKING SECURITY INFROM THE BEGINNING
Governance
Enterprise architecture
DevSecOps
Automation
INCIDENT RESPONSEASSUME BREACH AND PLAN ACCORDINGLY
Cyber Security Event Management Plan
Preparation and Exercising
Post-mortems and Continuous Improvement
GOVERNMENT OF CANADA
CHALLENGES
LEGACY DEBT
RAPIDLY-CHANGING TECHNOLOGY
TALENT SHORTAGE
WE’RE ALL IN THIS TOGETHER
Imraan Bashir, Senior Director, Cyber Security Treasury Board of Canada [email protected]@tbs-sct.gc.ca
@ibash_10
THANK
YOU!