Hello and bonjour. Thank you, Mr. Chair and members of the committee, for the invitation to appear today to discuss Canada's security posture in relation to Russia.
My name is Caroline Xavier. My pronouns are she, her and elle. I am the new chief of the Communications Security Establishment, known as CSE.
I am joined today by Sami Khoury, head of CSE's Canadian Centre for Cyber Security, which you have heard referred to as the cyber centre.
I'm pleased to join you. I too would just like to take a moment to acknowledge the land from which I'm joining you today, which is the traditional unceded territory of the Algonquin Anishinabe nation.
Today, I'd like to provide the committee with a brief update on CSE's role in Canada's cyber security posture as it relates to Russia, and some of the recent work that CSE has done to protect Canadians from related threats.
CSE, reporting to the Minister of National Defence, is one of Canada's key security and intelligence agencies. The Communications Security Establishment Act, or the CSE Act, sets out five aspects of our mandate: cybersecurity and information assurance, foreign intelligence, defensive cyber operations, active cyber operations, and technical and operation assistance. As part of this mandate, CSE is the country's lead technical authority for cybersecurity.
The Canadian Centre for Cyber Security, more commonly referred to as the Cyber Centre, is a branch within CSE and a single point of expertise on technical and operational cyber security matters.
I will now provide a brief breakdown of the key findings regarding the current cyber-threat landscape particularly as it relates to Russia. I should note that CSE has issued four bulletins about Russian-backed activities this year focused on threats to cybersecurity and on disinformation.
To set the stage, I'd like to highlight some of the current cyber threat challenges Canada faces. We identified these in our national cyber threat assessment, which I would encourage you to read if you'd like to have a better understanding of the current threat landscape.
In that assessment, we highlighted that cybercrime is the most prevalent and most pervasive threat to Canadians and Canadian businesses. Cybercriminals trying to probe Canadian systems have been found in Russia, China and Iran, among others. These actors use various techniques, such as ransomware, theft of personal data and online fraud. Critical infrastructure operators and large enterprises are some of the most lucrative targets.
While cybercrime is the most likely threat to impact the average Canadian, the state-sponsored cyber programs of China, North Korea, Iran and Russia pose the greatest strategic threat to Canada. Foreign cyber-threat activities, including Russian-backed actors, are attempting to target Canadian critical infrastructure operators as well as their operational and information technology.
Russia has significant cyber abilities and a demonstrated history of using them irresponsibly. This has included the SolarWinds cyber compromise, disruptions of COVID‑19 vaccine development, threats to Georgia's democratic process and the NotPetya malware.
Besides Russian-backed challenges to Canadian cybersecurity, as I have noted, Russian disinformation campaigns also threaten Canada and Canadians. In July of this year, CSE noted that it had continued to observe numerous Russian-backed online disinformation campaigns aimed at supporting Russia's brutal and unjustifiable invasion of Ukraine.
Now that I've gone over some of the key trends and threats, I'd like to provide an overview of how CSE's mandate helps us address these challenges.
CSE has unique technical and operational capabilities, which allow us to respond to the various types of threats Canada faces, such as the threat of hostile state actors.
CSE's foreign signals intelligence program provides sophisticated capabilities that allow us to access, process, decrypt and report on current and emerging cyber-threats. We then use this information to brief and disseminate to government.
The foreign intelligence CSE collects allows us to pass that information to not only critical infrastructure owners and operators in Canada, but also to our allied and NATO partners, as well as Ukraine.
Having this information ahead of any materialized threat allows them to proactively protect and defend their systems. The CSE Act further enables us to provide technical and operational assistance to federal law enforcement, security and defence partners, including the Department of National Defence, our Canadian Armed Forces, the RCMP and the Canadian Security Intelligence Service, or CSIS. This means that CSE is authorized to assist the CAF in support of government-authorized military missions, such as Operation Unifier. This includes intelligence sharing and cybersecurity.
One of CSE's main roles is to inform the government of the activities of foreign entities which threaten Canada or its allies. This may include foreign-based cyber threats, espionage, terrorism and even disinformation campaigns.
For example, since the Russian invasion of Ukraine began, we have observed numerous Russian-backed disinformation campaigns online that are designed to discredit and spread disinformation about NATO allies, as well as false narratives about Canada's involvement in the Russia-Ukraine conflict.
For example, controlled media outlets were directed to include doctored images of Canadian forces members on the front line and false claims about Canadian forces committing war crimes.
We shared this information on Twitter as part of the Government of Canada's efforts to help inform Canadians on how to help stop the spread of and protect themselves from disinformation.
We will continue to work closely with our Five Eyes partners, as well as harness all of our expertise to confidently ensure Canada's resiliency against threats in terms of cybersecurity or disinformation.
Although Russian cyber threat disinformation actors are becoming increasingly more sophisticated, I can assure you that we are working tirelessly to raise Canada's cyber security bar and protect all Canadians from these emerging threats.
We have the necessary expertise in place to monitor, detect and investigate potential threats. We are developing further capabilities and capacities to take active measures to protect, deter and defend against them.
We also continue to publish advice and guidance for Canadians and Canadian businesses to improve their cyber security practices.
We will continue to collaborate closely with our Five Eyes and NATO allies to protect the critical infrastructure, economies and democratic systems of our country.
With that, I will be pleased to have the opportunity to answer any questions you might have.
Thank you.