Mr. Speaker, I am presenting responses to the questions concerning the finding of the "National Cyber Threat Assessment 2025-2026" that vendor concentration in technology services increases cyber vulnerability.
With regard to (a), Shared Services Canada has not conducted a formal quantitative assessment on individual dominant technology services providers. However, the Government of Canada has taken steps to reduce its reliance on any single provider through implementation of diversification strategies as part of the development of enterprise services, and ensuring that products from multiple vendors are incorporated into procurements for Shared Services Canada services, including cyber security products, cloud hosting, desktop and mobile services, server and storage, and networking. Continued work on this Information Technologies Diversification Strategy is led by Shared Services Canada, with support and collaboration from the Office of the Chief Information Officer of Canada, in the Treasury Board of Canada Secretariat, and the Canadian Centre for Cyber Security, in an effort to reduce vendor concentration in these strategic areas.
With regard to (b), Shared Services Canada has not conducted specific studies or analyses to quantify dependency on individual dominant technology service providers since January 1, 2023.
With regard to (c), for national security reasons, the Government of Canada cannot publicly disclose the names of specific dominant service providers. However, it actively monitors and manages cybersecurity risks through a range of tools and measures.