CCCS - Guidance, news and events
Developing your IT recovery plan (ITSAP.40.004)
1 day 2 hours ago
Canadian Centre for Cyber Security
Developing your incident response plan (ITSAP.40.003)
1 day 2 hours ago
Canadian Centre for Cyber Security
Developing your business continuity plan (ITSAP.10.005)
1 day 2 hours ago
In the event of a cyber incident or natural disaster, your organization will need a business continuity plan (BCP) to resume its most critical business operations quickly. Your BCP will identify the risks from various threats and the impact they would have on your organization.
Canadian Centre for Cyber Security
Joint guidance on secure connectivity principles for operational technology
3 days 3 hours ago
This joint guidance outlines the desirable end-states that organizations should achieve when designing connectivity into OT environments. The end-states are intended as goals rather than minimum requirements.
Canadian Centre for Cyber Security
Generative artificial intelligence - ITSAP.00.041
1 month 1 week ago
This publication provides some information on the potential risks and mitigation measures associated with generative AI.
Canadian Centre for Cyber Security
Artificial Intelligence - ITSAP.00.040
1 month 1 week ago
Artificial intelligence (AI) uses intelligent computer programs to find patterns in data to make predictions or classifications. AI can be used to perform specific tasks by analyzing data online to replicate human thought processes and decision-making abilities.
Canadian Centre for Cyber Security
Joint cyber security advisory on pro-Russia hacktivists conducting opportunistic attacks on global critical infrastructure
1 month 1 week ago
Canadian Centre for Cyber Security
Ransomware
1 month 1 week ago
Canadian Centre for Cyber Security
Joint malware analysis report on Brickstorm backdoor
1 month 1 week ago
This joint report warns that People’s Republic of China (PRC) state-sponsored threat actors are using Brickstorm malware for long-term persistence on victims’ systems.
Canadian Centre for Cyber Security
Public content provenance for organizations (ITSP.10.005)
1 month 1 week ago
Canadian Centre for Cyber Security
Joint guidance on principles for the secure integration of artificial intelligence in operational technology
1 month 2 weeks ago
This joint guidance outlines 4 key principles CI owners and operators can follow to leverage the benefits of AI in OT systems while minimizing risk.
Canadian Centre for Cyber Security
Joint statement on malicious cyber activity targeting Canadian critical infrastructure
1 month 2 weeks ago
Canadian Centre for Cyber Security
Backgrounder: Malicious cyber activity targeting Canadian critical infrastructure
1 month 3 weeks ago
Canadian Centre for Cyber Security
The cyber threat to Canada’s water systems: Assessment and mitigation
1 month 3 weeks ago
Canadian Centre for Cyber Security
Don't take the bait: Recognize and avoid phishing attacks - ITSAP.00.101
1 month 3 weeks ago
Canadian Centre for Cyber Security
Joint guidance on mitigating risks from bulletproof hosting providers
1 month 4 weeks ago
This joint guidance provides recommendations to Internet service providers (ISPs) and network defenders to mitigate potential cybercriminal activity enabled by BPH providers.
Canadian Centre for Cyber Security
Joint guidance on Microsoft Exchange Server security best practices
2 months 2 weeks ago
This joint guidance provides security best practices to help administrators harden on-premises Exchange servers by enforcing a prevention posture and hardening authentication and encryption.
Canadian Centre for Cyber Security
Defending against adversary-in-the-middle threats with phishing-resistant multi-factor authentication (ITSM.30.031)
2 months 2 weeks ago
Canadian Centre for Cyber Security
Protecting specified information in non-Government of Canada systems and organizations (ITSP.10.171)
2 months 2 weeks ago
Canadian Centre for Cyber Security
Checked
4 hours 50 minutes ago