Mr. Speaker, I will be sharing my time with the member for Pickering—Scarborough East.
I am very pleased to have this opportunity to discuss the valuable work of the Communications Security Establishment Canada, known as CSEC, including its work in protecting Canada against foreign cyber threats. What we need in order to have an informed and reasoned debate about the role of Canada's security and intelligence agencies are the facts. At the risk of repeating what my hon. colleagues have already said, here again are some key facts about CSEC, an agency which many Canadians may know little about.
For almost 70 years now, CSEC has provided legitimate, necessary, and valuable services to the Government of Canada and Canadians. CSEC's collection of foreign intelligence makes an invaluable contribution to the pursuit of Canada's international affairs, its defence and security interests. In concrete terms, CSEC's foreign intelligence activities have helped uncover terrorist plots. They have helped save Canadian lives and have protected Canadians from other foreign threats.
CSEC helps protect Government of Canada information and computer networks from cyber threats. CSEC helps federal law enforcement and security partners with technical assistance that is lawful under its mandate. CSEC is subject to all Canadian laws, including the National Defence Act, the Canadian Charter of Rights and Freedoms, the Criminal Code, and the Privacy Act. What CSEC can and cannot do is well defined in law.
Protecting the privacy of Canadians is the law and CSEC follows the letter and spirit of that law. CSEC's activities are subject to a comprehensive and detailed set of policies, procedures, and mechanisms that ensure that CSEC remains compliant with the law. All of CSEC's activities are reviewed by the CSE commissioner. This commissioner, as we have said many times today, is independent of the government and of CSEC, and does not take direction from any minister or from CSEC itself.
All CSE commissioners, past and present, have been long-serving judges, including several former justices of the Supreme Court, whose integrity, independence, impartiality, and judgment are beyond reproach. The conclusions of all past CSE commissioners, in each of their public annual reports, have been that CSEC has never been found to have acted unlawfully. These are key facts. If we are to have a public debate about the role of CSEC and the appropriate oversight and review mechanisms for it, then let us discuss it based on facts.
Before I move on, I want to remind my hon. colleagues that CSEC and its employees are required by law, specifically the Security of Information Act, to keep the government's intelligence capabilities and activities secret. These requirements are in place for a good reason: to prevent potential adversaries, such as terrorists or foreign states, from knowing our capabilities and taking countermeasures against them.
My hon. colleagues and Canadians should be aware of the valuable service that CSEC provides each and every day. Specifically, I would like to highlight how CSEC stands at the front line in the battle against foreign cyber threats that target Canadian computer systems and networks on a daily basis. It should be obvious to all just how important information technology and the networks and systems they connect to have become in our daily lives.
At virtually every member's desk in the House, one sees hon. colleagues with laptops, tablets, smart phones, and other devices. With these marvels of modern technology, we can communicate directly and instantly with constituents by email, or broadcast to the world with a tweet. Canada and its economy are increasingly dependent on cyberspace and all it provides. It underpins the fundamental functioning of our economy today, including how the government increasingly provides services to citizens, and the daily operation of Canada's critical infrastructure.
As individuals, we are also increasingly plugged in. In fact, 85% of Canadians are online. Canadians spend more time online than citizens of any other country. Undoubtedly, we as a country and an economy rely on all of the benefits that cyberspace provides.
However excited we get about the next new smart phone or the newest app, we are also increasingly aware of the threats that lurk in cyberspace. These are threats to our personal data, to the government's most sensitive information, and to the very functioning of the vital cybersystems we depend upon as a society.
We know that cyberthreat individuals or organizations can range from hacktivists trying to make a statement, to criminals trying to tap into the lucrative cybercrime market, to terrorists using the Internet to recruit, plan, network, and fundraise, and to nation states that have the motivations and the resources to conduct long-term cyberespionage campaigns for the collection of intelligence.
Recognizing the importance of cyberthreats, this government released Canada's cybersecurity strategy in 2010, which provides a strategic framework for government action to secure the government's own systems, to work with the private sector and with other levels of government protecting critical infrastructure, and to help Canadians be secure online.
CSEC plays a critical role in achieving the first objective, securing the government's own systems. CSEC also helps government departments, like Shared Services Canada, to detect and to discover cyberthreats that probe and attempt to compromise government computer networks on a nearly constant basis. In fact, government systems are probed, we are told, millions of times a day. In this role, CSEC helps to ensure government information, which ranges from sensitive intelligence to the personal information of Canadians, remains out of the hands of foreign cyberthreat actors.
In addition, as the government transforms its information technology infrastructure, CSEC is helping Shared Services Canada ensure that security is built in right from the start. Security considerations are being baked into the design and procurement of the government's new email system, for example. Through such advice, CSEC will help ensure that the government's future systems and the personal information potentially contained therein will be less vulnerable from cyberthreats.
CSEC's contribution to Canadian cybersecurity is also unique, and this is because CSEC, through its lawful foreign signals intelligence activities, is able to understand foreign cyberthreats before they can target Canadian systems. By collecting foreign signals intelligence, CSEC allows the government to recognize malware and viruses and other devices unknown to commercial cybersecurity services.
Of course, as with all of its activities, CSEC must conduct its cyberprotection mission with great care, with adherence to all Canadian laws, and in compliance with extensive internal policies, procedures, and mechanisms that are in place, including those to ensure the ever-important privacy of Canadians.
Again, protecting the privacy of Canadians is the law, and CSEC follows the letter and the spirit of that law.
I should also remind all hon. members of this important note: CSEC is prohibited from targeting the communications of persons in Canada or Canadians anywhere under its foreign intelligence and cyberprotection mandates.
To ensure full compliance, the independent CSE commissioner has free rein to review all of CSEC's activities for lawfulness, and he does so on a regular basis. In fact, the CSE commissioner has recently praised CSEC's chiefs who, “...have spared no effort to instill within CSEC a culture of respect for the law and for the privacy of Canadians”. The commissioner writes, “I can say with pride and confidence that CSEC is truly being watched”.
Let me close by reminding my hon. colleagues and all Canadians of the invaluable role that Canada's security and intelligence organizations like CSEC play in protecting Canadians and Canadian interests from threats such as those emanating from cyberspace.