That's a very relevant question.
Bill C‑25 states that, in their policies, parties must have rules to ensure that information is protected according to how sensitive it is. This should absolutely include cyber protection aspects.
This is something we'll have to discuss with the political parties, because, indeed, it no longer happens on paper these days.