80 likes | 199 Views
Anti-Terrorism and Privacy, One Year After. Nancy Y. Cheng, FCA Associate Deputy Chief, IT Security Communications Security Establishment November 7, 2002. Presentation Outline. 9/11 and CSE Impact on the Information Technology Security “business” IT security and privacy, post 9/11.
E N D
Anti-Terrorism and Privacy,One Year After Nancy Y. Cheng, FCA Associate Deputy Chief, IT Security Communications Security Establishment November 7, 2002
Presentation Outline • 9/11 and CSE • Impact on the Information Technology Security “business” • IT security and privacy, post 9/11 CACR Info Security and Privacy & Security Workshop University of Toronto, November 7, 2002
9/11 and CSE • What’s new since 9/11? • Legislative authorities • Bill C-36, Anti-terrorism Act • National Defence Act amended to clarify authorities for CSE to combat terrorism • Resources • December 2001 budget provided funding for national security • CSE received part of that funding CACR Info Security and Privacy & Security Workshop University of Toronto, November 7, 2002
Impact on IT Security “Business” • Pre 9/11 • Primary focus was to be e-Government enabler • Investments in information infrastructures • One year after 9/11 • Dual drivers: enabler and protection • As enabler, moving beyond infrastructures • To protect, positioning to stay ahead of the curve CACR Info Security and Privacy & Security Workshop University of Toronto, November 7, 2002
IT Security and Privacy • What IT security is • Supports electronic service delivery by helping to ensure privacy rights are properly respected • Protects systems and data from cyber threats and malicious attacks by predicting, preventing, detecting and responding to them • What IT security is NOT • Does not serve as a means to control all citizenry data CACR Info Security and Privacy & Security Workshop University of Toronto, November 7, 2002
IT Security and Privacy… • Checks and balance • New authorities relate to “intercepting private communications” • Use of these authorities requires ministerial authorization • Restricted to “protecting computer systems or networks of the Government of Canada” • Subject to review by CSE Commissioner • Legislation to be reviewed within 3 years CACR Info Security and Privacy & Security Workshop University of Toronto, November 7, 2002
IT Security and Privacy… • Dealing with today’s issues • Examples: • Addressing identification and authentication needs • Assessing and providing security for wireless and mobile technologies • Understanding new threats and mitigate associated risks • Anticipating and preparing for tomorrow’s challenges CACR Info Security and Privacy & Security Workshop University of Toronto, November 7, 2002
Nancy.Cheng@cse-cst.gc.ca Phone: (613) 991-8332 FAX: (613) 991-6350 CACR Info Security and Privacy & Security Workshop University of Toronto, November 7, 2002