To update the ways to make this possible, we also need laws that are restrictive enough to discourage some people. We recently spoke about Bill C-11, which concerns the ability to protect individuals' personal data.
Without a definition of what constitutes a cyber conflict, on what basis can we declare the existence of a conflict with an organization that confronts us?
Even article 5 of the North Atlantic Treaty Organization, or NATO, doesn't define the term. This makes it difficult to know whether the unexplained shutdown of a power grid constitutes an act of war. Once a cyber conflict is defined, we'll be able to understand the scope.