Evidence of meeting #54 for Industry, Science and Technology in the 42nd Parliament, 1st Session. (The original version is on Parliament’s site, as are the minutes.) The winning word was security.

A recording is available from Parliament.

On the agenda

MPs speaking

Also speaking

Ron Parker  President, Shared Services Canada
Raj Thuppal  Assistant Deputy Minister, Cyber and IT Security, Shared Services Canada
Graham Barr  Acting Senior Assistant Deputy Minister, Strategy, Shared Services Canada
Wayne Smith  Former Chief Statistician of Canada, As an Individual
Ivan Fellegi  Former Chief Statistician of Canada, As an Individual

9:30 a.m.

President, Shared Services Canada

Ron Parker

The next gate we're looking at in terms of the first phase of the project that Mr. Barr has referred to is yellow tending green. We're working with Statistics Canada on prioritization within that suite of projects.

If I remember correctly, there are over 500 business requirements that we're looking to have delivered over that period of time. The integrated plan is being put together to enable the delivery of not only that phase, but also a number of ongoing projects that require resources as well.

9:35 a.m.

Conservative

Ben Lobb Conservative Huron—Bruce, ON

On what date did you sign the new service agreement with the new chief statistician?

9:35 a.m.

President, Shared Services Canada

Ron Parker

The very first one?

9:35 a.m.

Conservative

Ben Lobb Conservative Huron—Bruce, ON

No, the one where the new chief renegotiated—

9:35 a.m.

President, Shared Services Canada

Ron Parker

With the new chief, it was October 12.

9:35 a.m.

Conservative

Ben Lobb Conservative Huron—Bruce, ON

In that time, have there been any violations or failures of the service agreement?

9:35 a.m.

President, Shared Services Canada

Ron Parker

Statistics Canada has indicated that we've met the requirements under that service agreement.

9:35 a.m.

Conservative

Ben Lobb Conservative Huron—Bruce, ON

Have there been any hacks—and forgive me, I was a bit late—of Stats Canada data or information?

9:35 a.m.

President, Shared Services Canada

Ron Parker

Mr. Chair, I'm going to ask Mr. Thuppal to talk about the recent experience that I referred to in my opening remarks with Apache Struts 2.

9:35 a.m.

Assistant Deputy Minister, Cyber and IT Security, Shared Services Canada

Raj Thuppal

There was one recent event related to the Apache Struts 2, which is a web application developmental framework. StatsCan services were impacted by that particular vulnerability. There has been no data alteration or data breach. We were able to detect it very fast, and then took the services offline until the system was patched and brought it online again.

9:35 a.m.

Conservative

Ben Lobb Conservative Huron—Bruce, ON

I guess your competition going forward is going to be cloud computing, correct? I have read that there are already six federal organizations that have transferred some or all of their data to cloud computing.

Do you work with them on their transitioning data out of your data centre to the cloud computing systems?

9:35 a.m.

President, Shared Services Canada

Ron Parker

Mr. Chair, cloud computing will be a very important part of our strategy going forward. Cloud computing will provide elasticity that we require in order to meet changeable demands from departments.

We are in the process of running an RFP that will identify a number of vendors for cloud-based services for unclassified data. We are looking to establish Shared Services Canada as the broker for those services. We will put in place the supply contractual arrangements for departments. Departments will identify their needs and then look to one of those venders that are on the supply arrangements to provide the service.

9:35 a.m.

Conservative

Ben Lobb Conservative Huron—Bruce, ON

So from the date that a department determines that it wants to transition its data and computing to a cloud, how many years do you estimate it will take from the date they make that decision to their going live with whoever they select as the vendor?

9:35 a.m.

President, Shared Services Canada

Ron Parker

Mr. Chair, I believe the issue here is that there can be a very short time between the identification of the requirement by a customer and going to the cloud. Some of the applications that are being used are not complex.

As the member noted, some departments are already using the cloud. A lot depends on the nature of the current application and whether the department wants to start a new application or ultimately transfer. There is going to be a huge variance in how long that is given the complexity of the data and the application.

9:35 a.m.

Conservative

Ben Lobb Conservative Huron—Bruce, ON

What percentage—

9:35 a.m.

Liberal

The Chair Liberal Dan Ruimy

Thank you.

We have to move on.

It's back to you, Mr. Jowhari. You have five minutes.

9:35 a.m.

Liberal

Majid Jowhari Liberal Richmond Hill, ON

Thank you, Mr. Chair.

9:35 a.m.

Liberal

The Chair Liberal Dan Ruimy

Are you sharing it?

9:35 a.m.

Liberal

Majid Jowhari Liberal Richmond Hill, ON

Yes.

I'm want to go into further detail on the question I put to you already. You basically said that business requirements are identified and that StatsCan has the independence to assess those requirements. Based on the methodology, they have control over the prioritization of those requirements.

Let's take as an example the effort to develop a labour market report. Do they have control over the design of that report?

9:40 a.m.

President, Shared Services Canada

Ron Parker

Statistics Canada, Mr. Chair, has complete independence over the design of any methodology, its internal operations—

9:40 a.m.

Liberal

Majid Jowhari Liberal Richmond Hill, ON

Perfect. A yes would be good.

Do they have control over who gets access to run that report?

9:40 a.m.

President, Shared Services Canada

Ron Parker

Mr. Chair, we meet the security requirements and the access requirements that Statistics Canada—

9:40 a.m.

Liberal

Majid Jowhari Liberal Richmond Hill, ON

So you grant them, and they decide who is going to run this report.

Do they have control over the data that's in the multi-relational or multi-dimensional database that you have?

9:40 a.m.

President, Shared Services Canada

Ron Parker

Mr. Chair, Statistics Canada has complete control over the data.

9:40 a.m.

Liberal

Majid Jowhari Liberal Richmond Hill, ON

Okay, so they have control over the data, the development of the report, the way they want to see the report, and who gets access to it. They have IT resources at Stats Canada that work with you. Shared Services basically provides the infrastructure that's needed to ensure that Stats Canada can maintain its independence.

Is that a fair statement?