AndreaBozzo/ceres-open-data-index huggingface dataset:
Charter Statement - Bill C-8: An Act to implement certain provisions of the economic and fiscal update tabled in Parliament on December 14, 2021 and other measures

Section 4.2 of the Department of Justice Act requires the Minister of Justice to prepare a Charter Statement for every government bill to help inform public and Parliamentary debate on government bills. One of the Minister of Justice’s most important responsibilities is to examine legislation for inconsistency with the Canadian Charter of Rights and Freedoms [“the Charter”]. By tabling a Charter Statement, the Minister is sharing some of the key considerations that informed the review of a bill for inconsistency with the Charter. A Statement identifies Charter rights and freedoms that may potentially be engaged by a bill and provides a brief explanation of the nature of any engagement, in light of the measures being proposed.

A Charter Statement also identifies potential justifications for any limits a bill may impose on Charter rights and freedoms. Section 1 of the Charter provides that rights and freedoms may be subject to reasonable limits if those limits are prescribed by law and demonstrably justified in a free and democratic society. This means that Parliament may enact laws that limit Charter rights and freedoms. The Charter will be violated only where a limit is not demonstrably justifiable in a free and democratic society.

A Charter Statement is intended to provide legal information to the public and Parliament on a bill’s potential effects on rights and freedoms that are neither trivial nor too speculative. It is not intended to be a comprehensive overview of all conceivable Charter considerations. Additional considerations relevant to the constitutionality of a bill may also arise in the course of Parliamentary study and amendment of a bill. A Statement is not a legal opinion on the constitutionality of a bill.

Organization: Department of Justice Canada | Ministère de la Justice Canada
Security Considerations for the Use of Removable Media Devices for Protected C and Classified Information (ITSB-112)

This bulletin is in support of the Treasury Board of Canada Secretariat (TBS) Information Technology Policy Implementation Notice 2014-01 (ITPIN: 2014-01). The notice, released in May 2014, describes the risks posed by, and the possible mitigations for, removable media devices that are used to temporarily store GC information. The intended audience for this bulletin includes executives, those responsible for IT security risk management activities, and information system security practitioners.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Cryptographic Algorithms for UNCLASSIFIED, PROTECTED A, and PROTECTED B Information (ITSP.40.111)

The information in this publication identifies and describes approved cryptographic algorithms and appropriate methods of use to protect the confidentiality of PROTECTED A and PROTECTED B information and the integrity of information to the medium injury level as defined in CSE’s ITSG-33 IT Security Risk Management: A Lifecycle Approach [6].


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
HUMA committee briefing binder: Appearance of Minister of Employment, Workforce Development and Disability Inclusion - October 31, 2022 

Appearance of Minister of employment, workforce development and disability inclusion, Standing Committee on Human Resources, Skills and Social Development and the Status of Persons with Disabilities (HUMA) - Study: Bill C-22, Canada Disability Benefit Act - Date: October 31, 2022 

Organization: Employment and Social Development Canada | Emploi et Développement social Canada
Technology Supply Chain Guidelines (TSCG-01)

"Several meetings involving an ad-hoc group of federal government departments occurred in April-May 2008 around an emerging national security issue relating to the vulnerability of the supply chain for Government of Canada telecommunications equipment and services.

In addition to the threat of cyber attack, there is a growing awareness of the risks posed by potentially vulnerable or shaped technologies that may be entering the Government of Canada (GC) communications networks and information technology infrastructure through the supply chain.

One way to reduce these risks is to include specific security clauses in PWGSC contracts that are aimed at protecting the integrity, availability and confidentiality of Canadas data and communications.

These clauses were developed based on a ""managed telecommunications services"" scenario, whereby a contractor is given responsibility for selecting, implementing, and operating and maintaining telecommunications infrastructure and services. It has been determined that the development of ideal or one size fits all security clauses is not feasible due to the evolving threats, and the variety and complexity of GC operational environments and resulting requirements."


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Top 10 IT Security Actions: #6 Provide Tailored Cyber Security Training (ITSM.10.093)

This document is part of a suite of documents that focus on each of the top 10 IT security actions recommended in ITSM.10.189 Top 10 IT Security Actions to Protect Internet Connected Networks and Information [1]. While implementing all 10 of the recommended security actions can reduce your organization’s vulnerability to cyber threats, you should review your current cyber security activities to determine whether additional actions are required.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Using your mobile device securely (ITSAP.00.001)

"Your mobile device provides a convenient and flexible way to work anywhere or at anytime. While mobile devices play a vital role in the day-to-day operations of organizations and agencies, their use can also pose a threat to information and networks.

Mobile devices are attractive targets that provide unique opportunities for threat actors intent on gathering information, because they can contain vast amounts of sensitive and personal information. A compromised device has the potential to allow unauthorized access to your departmental network, placing not only your own information at risk, but also that of the organization.

It is important for all employees to remember that Canada is an attractive target for cyber-threat actors due to its wealth, resources, and diplomatic relationships."


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Top 10 IT Security Actions to Protect Internet Connected Networks and Information (ITSM.10.189)

The Top 10 Information Technology (IT) Security Actions to Protect Internet-Connected Networks and Information (ITSM.10.189) is based on the Canadian Centre for Cyber Security (CCCS) analysis of cyber threat activity trends and their impact on Internet-connected networks. Organizations that implement these recommendations will address many vulnerabilities and counter most current cyber threats.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Calculating Robustness for Boundary Controls (ITSP.80.032)

Calculating Robustness for Boundary Controls is an UNCLASSIFIED publication, issued under the authority of the Chief, Communications Security Establishment (CSE). Suggestions for amendments should be forwarded to the Canadian Centre for Cyber Security’s (CCCS) Contact Centre.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Spotting Malicious Email Messages (ITSAP.00.100)

Organizations and their networks are frequently targeted by a wide variety of threat actors looking to steal information. Cyber intruders are technologically savvy, vulnerability conscious, and aggressively agile; a successful intrusion can quickly lead to the loss of data integrity and confidentiality. Employees are privy to important and sensitive information, and as a result, often receive malicious emails that are intended to provide cyber intruders access to this information. Everyone needs to be aware of the threats and take care to ensure that organizational information is protected and secure.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Security Tips for Organizations With Remote Workers (ITSAP.10.016)

Remote work introduces some challenges when trying to balance functionality with security. When working remotely, your employees need to access the same internal services, applications, and information that they would have access to in the office. However, your organization also needs to protect its systems and information, as remote work introduces new vulnerabilities. You need to implement additional security precautions to prevent threat actors from taking advantage of those vulnerabilities.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Secure Your Accounts and Devices With Multi-Factor Authentication (ITSAP.30.030)

Organizations and individuals can benefit from using multi-factor authentication (MFA) to secure devices and accounts. With MFA enabled, two or more different authentication factors are needed to unlock a device or sign in to an account. Whether accessing email, cloud storage, or online banking services, MFA provides an extra layer of security from cyber attacks like credential stuffing. In credential stuffing, hackers use previously stolen credentials from one website, hoping that you have reused these credentials. If not already doing so, we recommend that you and your organization use MFA where possible to protect high-value business services and data from threat actors.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Password Managers-Security (ITSAP.30.025)

"Trying to use different and complex passwords for every website, account, and application can be challenging. If you are experiencing password overload, you may become careless. Maybe you keep all your passwords written down or reuse the same, easy to remember password. You can use a password manager to help you create, store, and remember your passwords.

By using a password manager, you don’t need to remember dozens of passwords. They promote the use of complex passwords and discourage password reuse. Even though password managers provide a number of advantages, these tools present some risks to user’s information which we will outline in this document."


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Parliamentarians: So You Think You’ve Been Hacked? What to do...

A compromise of your social media or email account has serious implications.

If you think your email or social media accounts have been breached, you should follow the steps below and contact your IT security officer. Depending on the nature of the suspected compromise, your IT security officer could be with the HoC. It could also be your DSO or your political party CIO. If you are not certain whom to call, you can reach out to the Canadian Centre for Cyber Security (Cyber Centre) and we can assist, as appropriate, and help guide you through the next steps.

Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Don't Take the Bait: Recognize and Avoid Phishing Attacks

Phishing is an attack where a scammer calls you, texts or emails you, or uses social media to trick you into clicking a malicious link, downloading malware, or sharing sensitive information. Phishing attempts are often generic mass messages, but the message appears to be legitimate and from a trusted source (e.g. from a bank, courier company).


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Cyber Centre Data Centre Virtualization Report: Best Practices for Data Centre Virtualization (ITSP.70.010)

A VDC must address the threats, inherent vulnerabilities, and characteristic risks to data centres, as well as those specific to complex virtualized environments. Fortunately, VDCs can be made secure by using several safeguards and best practices. These safeguards and best practices involve addressing each layer of the virtual environment as well as addressing interactions between the various layers. This report provides an overview of a VDC, presents the inherent vulnerabilities in a VDC, and provides recommendations on how to design a secure VDC. 


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Cross Domain Security Primer (ITSB-120)

"The need to securely access or move information between networks with different security classifications is an ongoing operational necessity within the Government of Canada (GC). Accessing or moving data from one network to another enables business operations, information sharing and decision making.

Any movement of information across networks has the potential of introducing new threats to the networks and jeopardizing the security of the information holdings. While several methods can be considered for moving information across networks (a.k.a. security domains), only Communications Security Establishment (CSE)-approved Cross Domain Solutions (CDS) should be used for information at security levels above Protected B."


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Best Practices for Passphrases and Passwords (ITSAP.30.032)

You have passwords for everything: your devices, your accounts (e.g. banking, social media, and email), and the websites you visit. By using passphrases or strong passwords you can protect your devices and information. Review the tips below to learn how you can create passphrases, strengthen your passwords, and avoid common mistakes that could put your information at risk.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Guidance for Hardening Microsoft Windows 10 Enterprise (ITSP.70.012)

ITSP.70.012 Guidance for Hardening Microsoft Windows 10 Enterprise is an UNCLASSIFIED publication, issued under the authority of the Chief, Communications Security Establishment (CSE). Suggestions for amendments should be forwarded to the Canadian Centre for Cyber Security’s Contact Centre.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
An Introduction to the Cyber Threat Environment

This document describes common concepts relevant to discussions about cyber threat activity in the Canadian context and acts as a point of reference for Canadian Centre for Cyber Security (Cyber Centre) publications. This introductory document provides baseline knowledge about the cyber threat environment, including cyber threat actors and their motivations, sophistication, techniques, tools, and the cyber threat surface.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Cyber Security Playbook for Elections Authorities (ITSM.10.021)

"This cyber security playbook guides elections authorities on anticipating, mitigating, and responding to threats that are specific to Canada’s democratic processes. This playbook introduces baseline cyber security measures and best practices that you can implement to improve your organization’s security profile. This playbook also provides a set of standards to reference as elections authorities continue to improve current systems and implement new ones.

The guidance in this document is based on information gathered from various sources and is only intended to provide a set of recommendations that you can implement in addition to your organizational policies and practices.

This document does not provide exhaustive guidance on the measures you should take to protect your organization against cyber threats. You should develop your own playbook, basing it on the security considerations introduced here and your organization’s business needs and security requirements. "


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Cyber Security Guidance for Elections Authorities (ITSM.10.020)

"This document is intended for elections authorities. It introduces common threats to Canada’s electoral processes and provides guidance on protecting the systems and the people involved in these processes. The guidance in this document is based on information gathered from various sources and is only intended to provide a set of recommendations that you can implement in addition to your organizational policies and practices.

Note that this document does not provide exhaustive guidance on the measures you should take to protect your organization against cyber threats. Your organization is responsible for defining its business and security requirements and ensuring that the appropriate measures are taken to protect the confidentiality, integrity, and availability of your networks, systems, and information.

The Cyber Centre was established under the Communications Security Establishment on October 1, 2018. The Cyber Centre is the national authority on cyber security, and its creation united operational security experts from across the Government of Canada (GC). In line with the National Cyber Security Strategy, the launch of the Cyber Centre represents Canada’s unified approach to cyber security. The Cyber Centre provides advice and guidance to the GC and Canadian businesses to ensure the country’s security, stability, and prosperity."


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
User Authentication Guidance for Information Technology Systems (ITSP.30.031 v3)

Information Technology Security Guidance for Practitioners ITSP.30.031 V3 supersedes ITSP.30.031 V2 User Authentication Guidance for IT Systems and provides guidance on user authentication in IT systems. ITSP.30.031 V3 is also part of a suite of documents developed by CSE to help secure GC departmental networks. User authentication is imperative in keeping cyber threat actors out of departmental systems, and the security controls used to protect GC systems are critical elements in the design of IT infrastructure.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
IT Media Sanitization (ITSP.40.006)

The ITSP.40.006 v2 IT Media Sanitization publication contains guidance for IT Security for Practitioners and other IT security authorities to help reduce the risk of exploitation of residual data on IT equipment with electronic memory and/or data storage media. This guidance applies to data at all levels of sensitivity. The media to be sanitized may be a discrete item such as a storage device, or it may be part of a network or mobile data processing device.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Security Considerations for Exposure of Classified IT Systems to Mobile Devices and Wireless Signals (ITSB-104)

This bulletin aims to describe the risks posed by, and possible mitigations for, the exposure of classified IT systems to wireless signals and mobile devices that are not authorized to connect to those systems. The intended audience for this bulletin includes those responsible for IT security risk management activities as well as information system security practitioners.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Mobile device guidance for high profile travellers (ITSAP.00.088)

If you’re someone who is in a high-profile position, such as a politician or a senior executive, you need to protect the security of your mobile devices when you travel. Mobile devices contain sensitive information and they are high-value targets for cyber threat actors. If your device or the information on it is compromised, it could be used against you or the organization you represent. Below, we cover some of the common threats and the security measures you should take before, during, and after you travel to protect your mobile devices.

Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Mobile Device Management (MDM) Solutions - Guidance for the Government of Canada (ITSB-64) 

Mobile devices have spread rapidly across the Government of Canada (GC) corporate enterprise and while they boost productivity and efficiency, they significantly increase the risk of a compromise to sensitive information. To help mitigate this threat, Communications Security Establishment Security Canada (CSEC) recommends departments utilize a Mobile Device Management (MDM) solution.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
Cyber Security Tips for Remote Work (ITSAP.10.116)

When you work in the office, you benefit from the security measures that your organization has in place to protect its networks, systems, devices, and information from cyber threats. Working remotely provides flexibility and convenience. However, remote work can weaken your organization’s security efforts and put you at risk if you don’t take precautions. Read through our cyber security tips to ensure that you are practicing good cyber hygiene when working from home, a café, or any other public location.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
IT Security Risk Management: A Lifecycle Approach (ITSG-33)

With today’s dynamic threat environment and Government of Canada (GC) fiscal constraints, information technology (IT) security can no longer be an afterthought, but rather needs to be a vital component in both your departmental and IT project plans. With that in mind, the ITSG-33 publication has been developed to help government departments ensure security is considered right from the start. By following the principles within this publication, you not only help ensure predictability and cost-effectiveness, you also help ensure that there are no hidden surprises preventing you from obtaining authority to operate and maintaining continued authorization.


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada
National Cyber Threat Assessment 2018

"In our highly connected digital society, Canadians and Canadian organizations rely on the Internet for both personal and professional activities. It is in this context that we assess cyber threats to Canadian individuals, businesses, and critical infrastructure, including government.

Cyber threat activity against Canadians often has financial or privacy implications. Yet cyber threat activity against Canadian businesses and critical infrastructure can have more far-reaching consequences, such as operational disruptions to the financial sector, large-scale theft of personal information, and even potential damage to infrastructure."


Organization: Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada