Consult the user guide
For assistance, please contact us
Consult the user guide
For assistance, please contact us
Add search criteria
Results: 1 - 15 of 810
View Glen Motz Profile
Thank you, Chair.
Again, thank you to the departmental officials for being here.
I have just two quick questions for the Department of Finance. You say that your first objective is to prevent data breaches. We know the reality is that these happen and are not localized to the financial sector.
Ms. Ryan, you said that when cybe events occur at a federally regulated institution, which is what we're talking about, control and oversight mechanisms are in place to manage them. Can you explain to Canadians in practical terms what that actually means when you play that out?
Judy Cameron
View Judy Cameron Profile
Judy Cameron
2019-07-15 15:35
I'll take that question.
I represent the Office of the Superintendent of Financial Institutions. Our mandate is to supervise financial institutions and set rules for them so as to protect the interests of depositors and creditors. Broadly speaking we're looking at safety and soundness, but we also make sure they comply with all federal rules. For example, we expect them to have systems in place to comply with privacy laws.
We set expectations around what institutions should be doing, such as complying with privacy laws. We also expect them to do cyber self-assessments to assess their own internal protections against cyber events. Then we supervise them to make sure they are complying with the expectations we have set out to make sure that they have good compliance management systems in place.
View Glen Motz Profile
Basically, it's just oversight. Now, in this particular circumstance, it's oversight of what's happened to make sure that—
Judy Cameron
View Judy Cameron Profile
Judy Cameron
2019-07-15 15:36
It's oversight of their systems to prevent this, really.
View Glen Motz Profile
Okay, so that's one question. The other question is for Ms. Ryan, or whoever might....
I'm just going to read the summary that you gave. You said that “cybersecurity is an area of critical importance for the Department of Finance. We are actively working with partners across government and the private sector to ensure that Canadians are well-protected from cybe -incidents and that when incidents do occur, they're managed in a way that mitigates the impact on consumers and the financial sector as a whole.”
What does that actually look like to impacted consumers, to consumers at large, to the financial institution, to the banking industry, to various government departments? You can say that, but what does it actually look like?
Annette Ryan
View Annette Ryan Profile
Annette Ryan
2019-07-15 15:37
I think that the number of federal partners you have had as witnesses today speaks to that.
The investments in the cyber centre were part of the first line of defence in strengthening the ability to prevent cyber incidents, and they are focused, as André Boucher spoke to, on the appropriate response to a cyber event. In this case there was a specific type of cyber event, a breach by an employee, so many of those defences that have been built by the cyber centre were not triggered in this case, but the resources of the cyber centre are complemented by new resources for the RCMP. You heard the RCMP speak about the national cybercrime centre and their efforts at the Canadian Anti-Fraud Centre.
We also realize that a cyber event or a data event does play out on the privacy side. Therefore, measures such as the new requirements for businesses to notify customers that there has been a breach are a key part of a citizen's ability to be vigilant about their own finances and to know that important information about them has been put into play. A monitoring service like Equifax is important because it helps put that person into the mix to know when something that's being done in their name is not right.
View Glen Motz Profile
I have just one quick follow-up question to that. If I were one of the 2.9 million Canadians impacted by this circumstance, or one of the millions in this country who have already been impacted by data breaches of various varieties, I would want assistance in getting my life back, like them. Right now there is a lot of talk about what that looks like, but in practical terms, Canadians want to know how to get their lives back. They want to mitigate the risks and the impacts that a breach like this has on their personal lives, on their financial futures and on those of their families.
I'm curious; it seems that the Department of Finance has a role to play in having a location from which Canadians can find the information they need, follow a template, call numbers, or whatever it may be to help get their lives in order, because this is, and will be, devastating to those whom these criminals are going to take advantage of.
As government, we have a responsibility to ensure that we protect Canadians as well as we can. This is not going to go away.
View Pierre Paul-Hus Profile
Thank you, Mr. Chair.
Thank you for joining us, Mr. Cormier.
We fully understand that this situation is very emotional and complicated for Desjardins. Mr. Cormier, you said that it was premature to hold a committee meeting. I want to point out to everyone again that the Conservatives requested this meeting, with the NDP's support, to see how the federal government could help Desjardins and the nearly three million affected members.
The objective isn't to investigate the situation or to find out how the data was stolen. The police are in charge of that aspect. For my part, I hope that the individual will be punished to the full extent of the law. I hope that the law is strong enough to send him to prison for a long time, but that's another matter.
We've met with officials from various departments, including the Department of Finance and the Canada Revenue Agency. These are large departments. However, it's difficult to know whether the Government of Canada can be useful in this situation.
I want to know whether you've received effective support from the government. If not, what could the government do to help you?
Guy Cormier
View Guy Cormier Profile
Guy Cormier
2019-07-15 16:03
There are two or three parts to my response. When this incident occurred, we contacted several federal and provincial government agencies. We spoke with the different departments of finance. I want to tell you that the departments were very helpful and supportive. Bernard Brun can confirm that very clear and open discussions were held.
I've noticed that both the federal and provincial government authorities want to reassure the public. You have no idea how important this is to us. Sometimes, we see what's being written and said. I understand that people have concerns and questions. As MPs, you must hear about many of them from the people in your constituencies.
I can see that the federal and provincial government officials want to reassure people and give them the proper information. This is very helpful to Desjardins. People must be told to contact us so that we can introduce them to the programs that we announced this morning. Whenever we meet with people in our caisses or client contact centres, we're in direct contact with them and we reassure them.
We don't want to trivialize the situation. However, according to several studies and several experts who are currently assisting us, there's a clear difference between a data breach and what happens in a real data theft. This isn't a “one-to-one” case. The proportions are very small.
By adding the protection that we announced this morning, we're telling all our members, including businesses, not to worry. If any issues arise, they should call Desjardins. We'll assist them.
View William Amos Profile
Lib. (QC)
View William Amos Profile
2019-05-14 9:11
I appreciate that. I think the concept of the “wards of the state” was extremely damaging. I want to bring us into a present-day context and put a case study in front of you, but also in front of our deputies, because there is a present-day impact in my community of Rapid Lake.
The community of Rapid Lake has only recently emerged out of third party management, which was a legal institution imposed upon them. They desperately need a new school. I've been working really hard—including with our parliamentary secretary—with the Department of Indigenous Services to get there, but as we attempt to bring about this kind of infrastructure renewal, which can then lead to community renewal and other infrastructure investments, we run up against other institutions that have a colonial impact, such as Hydro-Québec, for example, or other governments that aren't necessarily changing their way of doing business in the same fashion.
What would you suggest are the challenges related to the intersection between the more renewed, updated or more reconciled federal institutions and the non-federal institutions that haven't gone that far?
Daniel Watson
View Daniel Watson Profile
Daniel Watson
2019-05-14 9:13
That's an excellent question.
Built into the legislation for CIRNAC, for example, is the expectation that we work with provinces, territories and others. I think a good part of the responsibility of the Department of Crown-Indigenous Relations and Northern Affairs is going to be to help other governments to see where this is in their interest.
These are not things that we do simply because they're nice things to do. If we want to see communities advance in Canada, it's very hard to do that without schools. It's very hard to do that without drinking water. It's very hard to do that without housing.
In the federation that we have, working with provinces and territories is a critical part to any of these things succeeding. That will be a big part of our job. In fairness, across the country there will be some provinces that might wonder if they're out ahead of us, and they may sometimes feel as if they're pulling us ahead. In other instances, we will need to work hard with them to get them to engage in projects that we think are in our collective interest.
As the departmental historian has noted, over time the way of thinking about these things has changed. That's been true in the federal government, and I think it's been true in many provincial and territorial governments as well.
Jean-François Tremblay
View Jean-François Tremblay Profile
Jean-François Tremblay
2019-05-14 9:14
I think you're also as good as your outcomes. I think the best thing for us is to show what works on the ground and what the real solutions are.
If you go into a first nations community that is under self-government, you see a difference. If you go to B.C. and you talk with the First Nations Health Authority, you see a system that works better than the system we have in place. If you meet with the Mi’kmaq in the Atlantic, who manage their education system and have been managing the education system for more than 20 years, they have better results. I think that, when you show these results, you show partners that it's the way to work together.
Nicholas Trudel
View Nicholas Trudel Profile
Nicholas Trudel
2019-05-02 12:12
Thank you, Mr. Chair.
I am going to briefly describe the status quo in relation to the Seized Property Management Act and, then, explain how it will work after the amendments are made.
Currently, my organization is responsible for administering seized property that's being seized pursuant to federal criminal charges only. There are specific charges for which the act is eligible. These are specific charges under the Criminal Code, the Controlled Drugs and Substances Act and the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. These are very specific charges for which we are able to serve, and this would be upon issuance of a management order by a judge.
The current legislation and the limits that it has prohibit serving cases such as the fraud case that was described pursuant to your question, Mr. Chair.
Also, these criminal cases I think are not static. Although they may start out as a federal criminal charge, as a prosecution proceeds and investigations proceed, what began as an expected federal criminal charge may conclude ultimately in some other outcome: acquittal, a lesser charge, a plea bargain, etc.
The inability to provide services beyond the current scope of the act has some challenges associated with it. Firstly, if we're unable to serve law enforcement as a service provider for the management of these assets, that law enforcement is required to manage the assets themselves. If they are laying charges beyond or haven't laid charges yet, these assets remain with law enforcement to do. That means they spend law enforcement resources managing assets.
Certainly, the uncertainty of outcome from the outset of an investigation through to the end can prohibit the confiscation or seizure of assets or suspect assets. Lastly, as a challenge, it could spell inefficiency, in that we have multiple levels of organizations—provincial, municipal, federal—all maintaining the capacity to deal with seized assets.
The changes to the act would allow my organization to serve any federal public official, provincial public official or municipal public official. We would be able to serve any offence: a specific violation of any provincial or federal law for assets that are connected to an offence, or when assets are believed to be intended for the commission of an offence. It's a much broader ability to support and we'll be authorized to manage and dispose of those assets and provide advice to client organizations.
It would require consent. Provinces, territories and municipalities would choose to use those services. This is not imposed. It's available to them if they so choose. Our minister or his representatives would be required to agree to provide the service, with a mutual agreement between the two of us. They would also need to agree to share the net proceeds, so if the outcome is that a seized asset is forfeited to the Crown and sold or liquidated and costs are recovered—that's how the program is paid for under the current act and how it will continue to be paid for after the proposed amendments—then the net proceeds of sale are shared with the jurisdictions that participated in the law enforcement action. That's also part of the existing regime.
Really, it represents a broadening of who we can offer services to and in what context, but the core function remains as it is today.
Results: 1 - 15 of 810 | Page: 1 of 54

Export As: XML CSV RSS

For more data options, please see Open Data