Canada launches National Cyber Security Strategy to combat growing digital threats

The Government of Canada has introduced a comprehensive National Cyber Security Strategy (NCSS) to bolster the country’s defences against evolving cyber threats that increasingly endanger national security, economic stability, and critical infrastructure. Unveiled on February 6, 2025, by the Honourable David McGuinty, Minister of Public Safety, this strategy reflects Canada’s commitment to securing its digital future in an era marked by rapid technological advancements and sophisticated cyberattacks.

Amid rising concerns about cybercrime, data breaches, and ransomware targeting essential services, the NCSS sets out a coordinated, whole-of-society approach to strengthen Canada’s resilience against digital threats while fostering international cooperation in cybersecurity.

Why has Canada introduced a new National Cyber Security Strategy?

The launch of the new National Cyber Security Strategy is a direct response to the escalating risks posed by cyber threats. As Canada’s reliance on digital infrastructure deepens, with technology embedded in critical sectors like healthcare, transportation, energy, and communications, the vulnerabilities to malicious cyber activities have grown significantly.

According to the National Cyber Threat Assessment 2025-2026, cybercriminals and state-sponsored actors are exploiting these vulnerabilities, targeting both individuals and organisations through tactics like phishing, ransomware attacks, and large-scale data breaches. These threats not only compromise sensitive information but also disrupt essential services that Canadians depend on daily.

Minister David McGuinty highlighted the urgency of the situation, stating that Canada must remain a leader in cybersecurity to protect its citizens, businesses, and cross-border infrastructure. The NCSS aims to address these challenges through a robust framework that enhances national security while supporting the country’s digital economy.

How will the National Cyber Security Strategy protect Canada’s critical infrastructure?

A key focus of the NCSS is the protection of critical infrastructure, which includes vital services such as power grids, water supply systems, transportation networks, and healthcare facilities. The interconnected nature of these systems means that a successful cyberattack could have cascading effects, potentially paralysing multiple sectors simultaneously.

The strategy outlines measures to strengthen partnerships between federal, provincial, and territorial governments, law enforcement agencies, private sector organisations, and international allies. This collaborative approach aims to improve information sharing, enhance threat detection capabilities, and ensure coordinated responses to cyber incidents.

Moreover, the NCSS introduces initiatives to reduce service disruptions by promoting cybersecurity best practices among critical infrastructure operators. This includes encouraging regular risk assessments, investing in advanced threat detection technologies, and fostering a culture of cyber resilience across all sectors.

What role does international cooperation play in Canada’s cyber defence strategy?

Given the global nature of cyber threats, international cooperation is a cornerstone of Canada’s cybersecurity efforts. The NCSS aligns closely with the cybersecurity frameworks of the United States and other key allies, facilitating cross-border collaboration in threat intelligence, incident response, and policy development.

This alignment is particularly important for protecting cross-border critical infrastructure, such as energy pipelines, telecommunications networks, and financial systems, which are integral to both Canada’s and its partners’ national security. By sharing intelligence and coordinating responses with international allies, Canada can better detect and mitigate cyber threats that transcend national borders.

The strategy also emphasises Canada’s commitment to promoting a rules-based international order in cyberspace, advocating for responsible state behaviour and the development of global norms to prevent cyber conflicts.

How will Canada’s new cyber strategy support education and public awareness?

Recognising that cybersecurity is not solely the responsibility of governments and large organisations, the NCSS adopts a whole-of-society approach that emphasises the importance of public awareness and education. This approach acknowledges that individuals, communities, and businesses all play critical roles in maintaining Canada’s cyber resilience.

One of the strategy’s key initiatives is the development of cybersecurity education programs aimed at children and youth. These programs will focus on building digital literacy, teaching safe online practices, and preparing young Canadians to navigate the complexities of the digital world securely. By fostering a strong cybersecurity culture from an early age, the government aims to create a more informed and resilient population.

Additionally, the NCSS will fund awareness campaigns targeting small businesses, non-profit organisations, and vulnerable communities, providing them with the tools and knowledge needed to protect themselves against cyber threats.

What investments are being made to support Canada’s cybersecurity goals?

To support the implementation of the NCSS, the Government of Canada has committed an initial investment of C$37.8 million over six years. This funding will be directed toward enhancing cyber capabilities, supporting research initiatives, and strengthening Canada’s cybersecurity infrastructure.

One notable investment includes financial support for the establishment of a Cyber Attribution Data Centre at the University of New Brunswick, announced in December 2024. This centre will play a crucial role in advancing Canada’s cyber threat attribution capabilities, helping to identify the sources of cyberattacks and improve the country’s defensive posture.

The NCSS also builds on the foundations laid by the 2018 strategy, which led to the creation of key institutions such as the Canadian Centre for Cyber Security and the National Cybercrime Coordination Centre. These organisations continue to serve as central hubs for cybersecurity operations, intelligence sharing, and incident response.

What does the future hold for Canada’s cybersecurity landscape?

As cyber threats continue to evolve alongside emerging technologies like artificial intelligence, quantum computing, and the Internet of Things (IoT), Canada’s cybersecurity strategy must remain agile and adaptive. The NCSS reflects this need for flexibility, with a framework designed to anticipate future challenges and respond to new threats as they arise.

Minister David McGuinty underscored the importance of ongoing vigilance, stating that Canada’s leadership in cybersecurity is critical to safeguarding the nation’s prosperity and security. The strategy’s focus on collaboration, innovation, and resilience positions Canada to thrive in the digital age, ensuring that its citizens, businesses, and critical infrastructure are protected against the ever-changing landscape of cyber threats.