Canada’s Cyber Centre Contracts Grading Platform For Critical Infrastructure

Yesterday, The Canadian Centre for Cyber Security said it contracted SecurityScorecard and intends to use its rating platform to rank cyber threats for the country’s critical infrastructure.
 
Instantly, any critical infrastructure entity can be graded with a rating from “A” through “F” using continuously monitored threat intelligence data. The scoring platform’s intention is to help the Cyber Centre educate critical infrastructure organization operators on the risks they face and assist them in remediating and measuring cybersecurity risks.

“According to the World Economic Forum, critical infrastructure remains the prime target for threat actors. Our partnership with SecurityScorecard provides us with authoritative and trusted data on critical infrastructure and insight to manage such risks at scale. […] This will help the Cyber Centre ensure we can provide tailored support to critical infrastructure owner-operators vital to the security of Canada,” Cyber Centre head Sami Khoury said in a statement.

The partnership “serves as a model for other governments to collaborate with the private sector to achieve real-time visibility into the cyber threats facing critical infrastructure,” said Sachin Bansal, SecurityScorecard’s chief business officer.
 
The scoring platform is only for critical infrastructure operators and won’t be made public.

Troy Batterberry, CEO and Founder, EchoMark:

   “Cyber threats in today’s digital landscape are becoming increasingly sophisticated and pervasive. The importance of implementing cybersecurity measures cannot be overstated. The Canadian Cyber Centre’s decision to leverage SecurityScorecard’s tools is a testament to the growing need for dynamic and data-driven approaches in protecting critical national infrastructure.

   “This partnership between the Canadian Cyber Centre and SecurityScorecard exemplifies the type of collaboration and commitment to cybersecurity excellence that we strive for in our own operations. By prioritizing the identification and mitigation of cyber risks, we not only protect our own assets but also contribute to the broader security and resilience of the industries and communities we serve.”

David Ratner, CEO, HYAS Infosec:

   “The protection of critical infrastructure is, not ironically, increasingly critical as we see cyber intrusions cross the chasm from simple financial damage and harm to significant impact on human life. Having the ability to grade critical infrastructure is a great start and paves the way for programs that standardize not just cyber protection but real operational resiliency.  Only by shifting the conversation from one around pure prevention to one focused on resiliency and continuity of service will we be able to truly protect critical infrastructure and, in doing so, reduce the potential for impact on human life.”

While the Canadian citizen in me wishes that a Canadian company could have been found for this, I do applaud this move. One of the best ways we make ourselves safer is to work together to secure as much as possible. So if this move helps to achieve a positive outcome, I am all for this.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading