There are different threats. Some threats come from individuals who try to hack into a system. However, rogue states, such as China, also attack our systems.
As a private company, how do you respond to a cyber attack carried out by a state? Do you expect the Government of Canada to take action? Should government resources be involved? You'll take the first steps, but do you expect anything from the government in the event of an attack carried out by a state?