Information & Ethics committee  Obviously the policies and whether those vendors are encrypting at rest, whether they're encrypting in transit, whether they're taking various steps to protect data are part of the equation. The other part of the equation is, how are we protecting our own account management? Maki

Information & Ethics committee  Perhaps I'll just note that we're used to talking about computer code as something that we understand in terms of how that code functions. We don't generally treat each other that way. Increasingly, as the code gets more complex and harder for us to comprehend ourselves, it may b

Information & Ethics committee  It is incumbent upon any service that handles personally identifiable information or other sensitive information to provide the basic tools for a confidence-inspiring level of security. It's a common best practice. For instance, today we use what is called "two-factor authentica

Information & Ethics committee  The easier to use and, obviously, the more secure those services are, the more folks will use them, I believe. In some ways, this is also due to how long it takes to do this kind of work, a question of—if I may borrow a Canadian expression—skating to where the puck is going and

Information & Ethics committee  Not quite yet. CDS, being fairly young, is also walking before it runs. The citizenship examining schedule is the closest to that. The process before was that you would get a letter in the mail that looked like a summons. It was scary and it was written in “policy-eese”, and som

Information & Ethics committee  I haven't spoken with Minister Philpott about that particular approach. Over the last 18 months, CDS has literally had hundreds of conversations with offices in departments and agencies all over government. We listen to a lot of requests, many of which are not necessarily in our

Information & Ethics committee  Rare is the project we work on that does not delve into service design, and not just digital design. In fact, in every product team we have, in addition to our research and design, and our engineers, there's a member of our policy team on that team as well for exactly this reason

Information & Ethics committee  I can refer to my experience in the United States. Legislation, being the slowest and most encumbered of all routes to the solutions, can often result in unintended consequences. We saw that happen in several cases, so I would exhort all of us to look for the smallest and fastest

Information & Ethics committee  I'd say that in part—and this is actually part of the answer to the previous question as well—fear or confidence in a system is in part a function of how easy it is to use and understand and how transparent the system is about how it is dealing with you and with your information.

Information & Ethics committee  CDS's answer to that question is one partner-department at a time. Culture change is not usually something that happens effectively with a single directive that everybody should just start behaving and thinking differently all at once. There are pretty clear models of how adopt

Information & Ethics committee  I think the U.S. government shares many of the same obstacles that this government and other governments at this scale face. There are many sides to that question. I'm sure that in some places the U.S. government is a little further ahead and in some a little further behind.

Information & Ethics committee  There are two points I would be looking for. Number one is that in my ideal digital world, the system is fully transparent. You understand how the service is being delivered and what the steps are. When government asks for your information and when government provides you with t

Information & Ethics committee  CDS works with a limited number of partner departments at a time. We don't have that sort of horizontal data. We aren't privy to the kinds of threats that various departments are seeing in the back-end systems that we don't touch. That's probably not a question for me.

Information & Ethics committee  Not on the D9, but Canada is in a treaty with nations in Europe that requires us and all those nations to provide a single source of—

Information & Ethics committee  No. We're required to provide a single source of procurement opportunities across federal, provincial and local governments, academic and health institutions by, I believe, 2022. This is way outside my wheelhouse. We've been discussing and working on that with PSPC. They would