Cyber and Information Technology Security

Part of Shared Services Canada’s (SSC) mandate is to design and operate an effective, efficient and secure IT infrastructure that protects Government of Canada data and technology assets. SSC develops security policies, standards, plans and designs, and provides security-related services for the delivery of Government services. SSC is responsible for applying controls such as firewall, anti-virus and anti-malware, secure remote access, and vulnerability management to GC systems and services.

SSC’s role in strengthening cyber and IT security:

• protects Canada’s networks, systems and sensitive data;
• protects Canadians’ privacy and information;
• modernizes the Government of Canada’s cyber and IT security infrastructure;
• achieves broader Government of Canada IT security compliance and outcomes;
• supports the Canadian Center for Cyber Security (CCCS); and
• contributes to Canada’s competitive advantage, economic prosperity and national security.

SSC is focused on three security service areas:

• Cyber Security Projects – providing design and compliance advice to ensure secure Government of Canada systems, networks and sensitive data as part of Canada’s National Cyber Security Strategy;
• Secret Infrastructure – delivering a consolidated and coordinated Government of Canada secret infrastructure that will further enable government officials to communicate effectively and securely at all times; and
• Security Management and Governance – providing risk assessment services, ensuring adherence to cyber policies and standards, coordinating cyber security-related audits and evaluations, maintaining security compliance, and managing SSC’s Communications Security (COMSEC) account and equipment for enterprise infrastructure and facilities.