Canadian organizations seek homegrown cybersecurity solutions amid sovereignty concerns: CIRA

As the federal government prioritizes a Canadian sovereign cloud, Canadian cybersecurity professionals are also prioritizing made-in-Canada cybersecurity solutions.

New data from CIRA’s 2025 Cybersecurity Survey reveals that geopolitical risks are shaping vendor selection. Eighty-two per cent of experts say a country of origin has become more important when choosing cybersecurity providers, and just over half (56 per cent) have reconsidered U.S. vendors due to trade and political uncertainty.

The full findings are featured in this year’s survey report.

Key findings

  • Geopolitics reshape vendor choices: 82 per cent now say a country of origin has become more important in selecting vendors, and 56 per cent have already reconsidered their use of U.S.-based providers due to political uncertainty.
  • Training lags while threats escalate: nearly all organizations (98 per cent) conduct cybersecurity awareness training, but the frequency has remained unchanged since 2022-2023 even as threat actors grow more sophisticated and hostile.
  • Paying ransomware is the new norm: one in four Canadian organizations (24 per cent) were victims of ransomware in the past year. Among them, 74 per cent had data exfiltrated and 74 per cent paid a ransom, typically $25,000 or more.
  • Data breaches have surged: 42 per cent of organizations reported a breach of customer or employee data in 2025, up from 29 per cent in 2022.
  • Generative AI is both adopted and feared: almost two-thirds (65 per cent) of organizations have integrated AI tools into workflows and operations (up from 44 per cent in 2023), yet 70 per cent are worried about AI-enabled cyber attacks, privacy breaches, data poisoning and advanced phishing.

Additional resources

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading