Canadian Forum for Digital Infrastructure Resilience (CFDIR)

The AI/ML working group performs activities to support Canadians in their awareness of key issues surrounding the use of AI/ML technologies, integrations, systems and solutions. Projects pursued by the working group endeavour to promote safe, responsible and advantageous use of AI/ML, and to bolster economic security and prosperity. These deliverables align with Canadian values such as information privacy, decision-making fairness, transparency and equity. The following five strategic pillars define initiatives undertaken by the AI/ML working group:

1. Security and resilience
2. Trust and ethics in AI/ML
3. Education and awareness
4. Innovation and prosperity
5. Environment and sustainability

Cloud service providers (CSPs) are increasingly replacing on-premise environments in organizations. This migration to new computing environments requires changes in security and privacy assurances. While international standards bodies are evolving in this respect, additional guidance would benefit Canadian organizations’ understanding of how to secure services now accessible in the cloud. Indeed, CR is not just about avoiding downtime, but also about ensuring performance, security, and scalability of cloud services.

Internet resilience is the ability of the Internet to withstand and recover from various types of disruptions, such as natural disasters or cyber attacks. This includes the ability of Internet infrastructure, such as networks and servers, to remain functional during and after a disruption. Individuals’ and organizations’ ability to stay connected and continue accessing online services and information is another aspect of IR. IR is an important factor in maintaining the reliability and stability of the Internet, as well as ensuring that it continues to be a valuable tool for communication, commerce, and information sharing.

The QR working group is responsible for creating guidelines and best practices documents, which are updated annually. These documents are important because quantum technologies are poised to play a major role in Canada's future, from its national security to its economic standing. While Canada is among the global leaders in quantum research, it nevertheless faces challenges in the adoption of these technologies as they approach market readiness. According to Canada’s National Quantum Strategy (2022), estimates of the total economic impact of quantum technologies in Canada by 2025, including indirect and induced effects, will be $533 million, with 1,100 jobs and $188.3 million in returns.

The materials created by the QR working group are designed to help critical infrastructure sectors plan and prepare for the transition of digital systems to use standardized quantum-safe cryptographic technologies and solutions in order to protect the confidentiality and integrity of their data and systems. Collaborative work through bodies such as the CFDIR will be critical in the years ahead to identify what needs to be done and when in order to get ready for a post-quantum world.

Rapid response (RR) is an ad hoc working group that has been leveraged to share information following critical cyber incidences such as Log4j and the SolarWinds hack. Should the need arise to communicate and mount a response from the Information and Communication Technologies (ICT) community with the Government of Canada or vice versa, the RR working group can be mobilized quickly.

Supply chain assurance (SCA) is a key focus area for the Government of Canada and governments around the world for fostering a secure, resilient digital supply chain. Utilizing the scale and resources of third-party suppliers and services, integrated across both hardware and software development lifecycles, Information and Communication Technologies (ICT) organizations can maximize efficiency and productivity to deliver critical technology capabilities. ICT providers are now responsible not only for the security of their own products and services, but must also have confidence in the security and resilience of their entire supplier network, including their suppliers’ suppliers.