I am always a bit leery about setting up new agencies or new commands. I would say it is preferable to start by creating an advisor position at the Privy Council Office. If it subsequently comes to light that we need a new structure in place to adequately protect our networks and to implement policies, we could explore that option at that point. But we should start by establishing a position or a team over at the Privy Council Office that would be responsible for coordinating all the departments and ensuring each does its part. In my opinion, that should be the first step, rather than trying to create a new agency with all the costs and red tape that would entail.
On February 16th, 2012. See this statement in context.