Yes. We welcomed the Auditor General's report.
We are at the very beginning of our migration to cloud as an organization. The findings in the auditor's report would be consistent with my experience, having done this in other large Canadian organizations, where at the beginning you have a strong set of controls but the organization needs to adapt to make sure those controls are consistently applied.
We have taken action already to work with the different departments to ensure there is a clarity of roles and responsibilities. You will note that we have published an update to the GC cybersecurity event management plan. That's actually been in the works for about nine months. There was an update posted late last week, so that is a work in progress for us and will continue to be a work in progress.
Monitoring is going to be a very large part of ensuring that we have good controls in place that are in all cases being followed.