Communications Security Establishment Canada

Cyber security guidance

Cyber security guidance

Cyber security guidance

This cyber threat bulletin provides an update to Canadians about the threat from ransomware in Canada and how we expect that threat to evolve over the next year.

Table of contents Introduction The digital dransformation of OT OT cybersecurity vs. IT cybersecurity OT exposure in Canada: A snapshot The OT of the future: Cyber-physical systems The role of OT in critical infrastructure The cyber threat to OT Direct vs indirect...

The information provided in this document is intended to inform and assist organizations with drawing down the risks, reducing impacts, and taking preventative actions associated with ransomware attacks. You can use the considerations below to articulate your business and security requirements...

This document provides web application and system administrators with security recommendations to protect web application systems against credential stuffing attacks.

This document highlights the cyber threats facing individuals and organizations in Canada. It provides an update to the National Cyber Threat Assessment 2018 (NCTA 2018) and the National Cyber Threat Assessment 2020 (NCTA 2020), with analysis of the interim years and forecasts until 2024. We...

This document provides an update to the 2017 Cyber threats to Canada’s democratic process reports and 2019 Cyber threats to Canada’s democratic process reports released by CSE. Its purpose is to inform Canadians about cyber threats to the democratic process.

"In our highly connected digital society, Canadians and Canadian organizations rely on the Internet for both personal and professional activities. It is in this context that we assess cyber threats to Canadian individuals, businesses, and critical infrastructure, including government. Cyber...

The recent cyber threat activity against the democratic process in the United States and Europe has raised concerns about similar threats to Canada. In this assessment, we consider the cyber threats to Canada’s democratic process at the federal, provincial/territorial, and municipal levels of...

o Canadian Medium Assurance Solutions o Shared Services Canada’s Security Operations Centre o CSE’s Top 10 and Shared Services Canada o CSE’s Top 10 in the Mobile Environment

o Social Media Security Pitfalls o Success of your Departmental Mission o Anatomy of a Cyber Intrusion o Securing BlackBerry Devices o Using Wi-Fi While Travelling

o Interview: Why the Top 10? o Denial of Service o Mobility Security o Cyber Security Awareness Month o Zero-Day Exploits o Disposition of Windows XP o Cross Domain Solutions

o Web 2.0 Security Risks o Data Diodes in a Cross-Domain Solution o The Importance of a Departmental TA o Two-Factor Authentication o Cloud Computing

o Instant Messaging Security Risks o Spotting Malicious Emails o GC CIRT Pointer: Exploit Kits o Securing your GC SECRET Network o Sharing Information across Different Security Domains o VoIP for GC Departments o TBS Corner: Web 2.0 and the GC o...

o CSE’s Top 10 Security Actions o The Dangers of Free Dynamic DNS o Using a Blackberry as a Hotspot o Cyber Security Considerations for Management o Hardware Security Modules o Windows 7 Hardening Guide o Measures to Protect Your Network

o Don’t Fall Victim to Ransomware: 5 Actions to Protect Your Network o Cyber Security Event Management Plan o Treasury Board Secretariat of Canada “Engarde” Exercise o How Are Your Cyber Hygiene Habits? o Internet of Things – The Future is Now

o 5 Tips for Protecting Classified Information o Modernizing our Secret Infrastructure o Security Categorization for an Open Government o Go Ahead...This Line is Secure o Electromagnetic Emissions o Supply Chain Integrity

o Network Security Zones o Smart Computing Tips for Everyone o Securing WLANs o Risk Management for iPads o Common Challenges to Adopting a Risk Management Strategy o Minimizing Administrative Privileges o Java Mitigation Measures