Public Safety Minister Ralph Goodale, centre, pictured June 12 on the Hill, flanked by RCMP superintendent Jeff Adams, left, Parliamentary Secretary for Innovation David Lametti, Defence Minister Harjit Sajjan, and head of the new Canadian Centre for Cyber Security Scott Jones. Together they announced more details about the federal government’s cybersecurity strategy. The Hill Times photograph by Andrew Meade
The federal government is betting on its half-a-billion-dollar national cybersecurity strategy to help make Canada a global hub for the growing cyber protection industry, but advocates warn that goal will be impossible to achieve without addressing Canada’s shortage of skilled cyber talent.
“It’s mission critical,” Katherine Thompson, chair of the Canadian Advanced Technology Alliance’s (CATA) cyber council, told The Hill Times. “I have clients who call me on a daily basis, who are basically pulling their hair out because they can’t find skilled talent.”
Ms. Thompson, who belongs to an association representing a large share of companies in the innovation economy, said there’s a “zero percentage” jobless rate in the cybersecurity industry in Canada right now.
As most Canadians and businesses plug into the internet and digital technology, new threats of hacking and online intrusions have emerged, creating a fast-growing need for cyber protection services. Threats can range from online nuisances to system-wide attacks affecting national security.
Ms. Thompson pointed to a 2017 multi-million-dollar investment by TD and Scotiabank into a cybersecurity innovation hub in Israel as an example.
“You’ve got two large North American banks that say, ‘Hey, I can find more skilled cybersecurity expertise in a country of 8.4 million people than in a continent of 340 million people.’ We have a problem,” Ms. Thompson said.
In June, Public Safety Minister Ralph Goodale (Regina-Wascana, Sask.) provided the public more details on Canada’s five-year $507-million cybersecurity strategy, first announced through the 2018 federal budget, and aimed at modernizing federal governments and providing resources for small businesses.
“Better cybersecurity knowledge and skills are needed. This extends from our children to our elderly, and from our small and medium business owners to our law enforcement agencies and corporate executives,” the strategy reads.
The June release didn’t provide specific solutions to addressing the issue, but at a press conference on June 12, Mr. Goodale had described it then as both a “huge challenge and huge opportunity.”
While void of solutions, Ms. Thompson said the strategy struck the right tone and hit on the right issues. However, she said the federal government ought to play a “supporting role” in enhancing cybersecurity for Canadians, rather than dictating it.
A pillar of the national strategy is a one-stop website offering small- and medium-sized enterprises information on how to secure their businesses. Under the plan, the Canadian Centre for Cyber Security, housed in the Communications Security Establishment, will also cover protection for the entire federal government. It will be headed by Scott Jones, assistant deputy minister of IT security. Legislation is required to enact this national strategy; the government has not yet introduced a bill to do so.
Meanwhile, a recent Deloitte report, commissioned by the Toronto Financial Services Association, found the demand for cyber talent is increasing by seven per cent annually, and estimates that there will be more than 5,000 jobs in the cyber security sector to fill between now and 2021.
The report notes that the skills shortage is happening in other parts of the world as well, but that Canadian schools aren’t training enough people for the growing global field, which is expected to stand at 1.8 million employees by 2022.
“It’s a crunch all over,” said Mr. Wolfond. “It takes you to be diligent and spend the time to get the right people onto your team.
“Demand for [cybersecurity talent], like in all of tech, clearly outstrips supply.”
The federal government currently deploys SecureKey Concierge, an authentication system that allows Canadians to log into more than 80 government sites securely, including the Canada Revenue Agency website.
“It’s Cali or bust, right? We’re losing a lot of good talent,” he said.
Ms. Thompson said in the short term, it’s about getting people who already have adequate cyber skills and training and encouraging them to consider careers in digital protection. Over the long term, it’s about “developing the future cyber warrior,” and may require changing school curriculums, she said.
CATA is currently collaborating with the U.S. Department of Commerce on a cross-border Kindergarten-to-Grade 12 strategy called the National Initiative for Cybersecurity Education. The advocacy group will also soon launch a training program targeting veterans, in partnership with the Canadian Armed Forces and Veterans Affairs Canada, and another for recent graduates.
The RCMP also noted that police departments across Canada have received 24,000 reports of cybercrime in 2016, a 58 per cent increase from 2014. The agency is planning to hire hundreds of workers to staff its $201-million National Cybercrime Coordination Unit, also announced in the 2018 budget, and stakeholders expect it may run into hiring issues. The unit will act as a hub for law enforcement to co-ordinate investigating cyber crimes.
Ms. Thompson also pointed to the lack of data and tracking about the need for cybersecurity in Canada. That’s in comparison the U.S. Department of Commerce, which does tracking so precise there’s a national heat map showing the concentration of unfilled cybersecurity jobs on display in its headquarters in Washington, D.C.
“We simply know we have a gap that’s growing, we just haven’t quantified it,” she said. “It’s kind of like shooting fish in a barrel.”
Highlights of the National Cybersecurity Strategy
Canada’s cybersecurity industry, at a glance
—Public Safety Canada and Deloitte
The Canadian Advanced Technology Alliance (CATAAlliance), Canada’s One Voice for Innovation Lobby Group, crowdsources ideas and guidance from thousands of opt in members in moderated social networks in Canada and key global markets. Supported by evidence-based research, CATAAlliance then mobilizes the community behind public policy recommendations designed to boost Canada’s innovation and competitiveness success.