I think it's important to say that there are some effective cyber-defence tools out there, and the cyber-defence sensors are one of them. It is a policy choice over which federal organizations are required to use the services offered by Shared Services Canada. Out of the 119 that are not required, some have voluntarily adopted some of the tools. They are known to be very effective.
However, when we asked them why they don't use the tools, they cited a few reasons, one being a potential impact on their independence. For example, if they were a Crown corporation using a tool offered by the government, it could impede their independence. They felt that there was limited ability to customize these tools, and they were also concerned about the maintenance and support that might be offered from other organizations.
Now, I can tell you that I'm one of the most independent offices in the federal government, and while I am responsible for ensuring that I have good cyber-defences, I have adopted the cyber-defence sensors, because they are a layer over and above what I have already put into place. I think that Canadians would expect that the federal government would do everything it could to protect their information and the government's information.