It's a great question. I'm not sure I'll answer in the way you intended.
If we look at what's been happening in Ukraine and the Middle East, after military facilities, the biggest targets are energy facilities. It's obvious that these are essential to society. If you disrupt them, it has a tremendous economic and civilian cost. They're attractive targets.
I'm delivering a lecture to DND next week, actually, on what the critical mineral- and energy-producing regions and assets are, and not just the mines and basins, but also the processing facilities. Some of them are single points of failure-ish, and we need to think about protecting certain sites. Obviously, it's not something we've had to think about in Canada for 60 years—if ever—but it's certainly something we have to think about now.
To get to your point, cyber-attacks are happening on these facilities and in this infrastructure every single day. Some of that is ransomware and malware, and some of it is state-sponsored. Companies are certainly taking proactive approaches.
Cyber command is taking proactive approaches, but it is very clear that this is another front, and that for Canada in particular, damaging our critical mineral and energy facilities would be a huge boon to our adversaries.