Industry Committee on April 4th, 2017

[Ron Parker]

The next gate we're looking at in terms of the first phase of the project that Mr. Barr has referred to is yellow tending green. We're working with Statistics Canada on prioritization within that suite of projects.

If I remember correctly, there are over 500 business requirements that we're looking to have delivered over that period of time. The integrated plan is being put together to enable the delivery of not only that phase, but also a number of ongoing projects that require resources as well.

[Ben Lobb, Conservative, Huron—Bruce, ON]

On what date did you sign the new service agreement with the new chief statistician?

[Ron Parker]

The very first one?

[Ben Lobb, Conservative, Huron—Bruce, ON]

No, the one where the new chief renegotiated—

[Ron Parker]

With the new chief, it was October 12.

[Ben Lobb, Conservative, Huron—Bruce, ON]

In that time, have there been any violations or failures of the service agreement?

[Ron Parker]

Statistics Canada has indicated that we've met the requirements under that service agreement.

[Ben Lobb, Conservative, Huron—Bruce, ON]

Have there been any hacks—and forgive me, I was a bit late—of Stats Canada data or information?

[Ron Parker]

Mr. Chair, I'm going to ask Mr. Thuppal to talk about the recent experience that I referred to in my opening remarks with Apache Struts 2.

[Raj Thuppal]

There was one recent event related to the Apache Struts 2, which is a web application developmental framework. StatsCan services were impacted by that particular vulnerability. There has been no data alteration or data breach. We were able to detect it very fast, and then took the services offline until the system was patched and brought it online again.

[Ben Lobb, Conservative, Huron—Bruce, ON]

I guess your competition going forward is going to be cloud computing, correct? I have read that there are already six federal organizations that have transferred some or all of their data to cloud computing.

Do you work with them on their transitioning data out of your data centre to the cloud computing systems?

[Ron Parker]

Mr. Chair, cloud computing will be a very important part of our strategy going forward. Cloud computing will provide elasticity that we require in order to meet changeable demands from departments.

We are in the process of running an RFP that will identify a number of vendors for cloud-based services for unclassified data. We are looking to establish Shared Services Canada as the broker for those services. We will put in place the supply contractual arrangements for departments. Departments will identify their needs and then look to one of those venders that are on the supply arrangements to provide the service.

[Ben Lobb, Conservative, Huron—Bruce, ON]

So from the date that a department determines that it wants to transition its data and computing to a cloud, how many years do you estimate it will take from the date they make that decision to their going live with whoever they select as the vendor?

[Ron Parker]

Mr. Chair, I believe the issue here is that there can be a very short time between the identification of the requirement by a customer and going to the cloud. Some of the applications that are being used are not complex.

As the member noted, some departments are already using the cloud. A lot depends on the nature of the current application and whether the department wants to start a new application or ultimately transfer. There is going to be a huge variance in how long that is given the complexity of the data and the application.

[Ben Lobb, Conservative, Huron—Bruce, ON]

What percentage—

[The Chair, Liberal, Dan Ruimy]

Thank you.

We have to move on.

It's back to you, Mr. Jowhari. You have five minutes.

[Majid Jowhari, Liberal, Richmond Hill, ON]

Thank you, Mr. Chair.

[The Chair, Liberal, Dan Ruimy]

Are you sharing it?

[Majid Jowhari, Liberal, Richmond Hill, ON]

Yes.

I'm want to go into further detail on the question I put to you already. You basically said that business requirements are identified and that StatsCan has the independence to assess those requirements. Based on the methodology, they have control over the prioritization of those requirements.

Let's take as an example the effort to develop a labour market report. Do they have control over the design of that report?

[Ron Parker]

Statistics Canada, Mr. Chair, has complete independence over the design of any methodology, its internal operations—

[Majid Jowhari, Liberal, Richmond Hill, ON]

Perfect. A yes would be good.

Do they have control over who gets access to run that report?

[Ron Parker]

Mr. Chair, we meet the security requirements and the access requirements that Statistics Canada—

[Majid Jowhari, Liberal, Richmond Hill, ON]

So you grant them, and they decide who is going to run this report.

Do they have control over the data that's in the multi-relational or multi-dimensional database that you have?

[Ron Parker]

Mr. Chair, Statistics Canada has complete control over the data.

[Majid Jowhari, Liberal, Richmond Hill, ON]

Okay, so they have control over the data, the development of the report, the way they want to see the report, and who gets access to it. They have IT resources at Stats Canada that work with you. Shared Services basically provides the infrastructure that's needed to ensure that Stats Canada can maintain its independence.

Is that a fair statement?