I think the first thing Canada needs to realize is that this is not something that will be solved within government. It has to be a partnership with the private sector. I can't emphasize this enough. If we rely on government procedures and IT policies to ensure cybersecurity in this country, we will fall short.
If you look at our largest allies, they rely on and are working closely with all the big IT firms. In the United States, it's Google, Microsoft, AWS and Oracle. In the United Kingdom and Australia, it's AWS. That's simply because of the level of expertise and know-how. Keeping pace with that threat is not something the public sector can do adequately, given the systems we have.
In a Canadian context, this extends beyond simply working with these large firms in the national security community. It also means working with the banking sector and other vulnerable sectors, because it isn't so much an attack on national defence and the national security community that will make us vulnerable; it is an attack on the civilian, private sector banking sector that will leave us hobbled. That level of co-operation is not adequate yet.