Thank you, Mr. Chair.
I'm looking at my notes again for CPC-5. Making non-disclosure conditional on a Federal Court application, as we spoke about again and again, could delay urgent action and may not capture other legitimate reasons that non-disclosure may be needed, such as commercial, reputational or technical risks to an entity or a broader system.
On that, my question will be on the response speed.
Given that cyber-attacks can occur at digital speeds—and we repeatedly say we are talking about milliseconds—how would the requirement to obtain prior judicial authorization for a non-disclosure order impact the government's ability to act instantly to stop an ongoing breach without alerting the attacker that we are onto them?
