The North is a region that has been increasingly targeted by cybercriminals and foreign governments, leading to a series of high-profile incidents in recent years. To combat this, the Communications Security Establishment (CSE) has deployed digital sensors on territorial government IT systems in the Northwest Territories, followed by the Yukon and Nunavut in 2024. These sensors are a type of software that can be installed on laptops, servers, and in the cloud, and they check computer systems for updates and vulnerabilities while scanning for suspicious activity. The information is sent to the CSE's Canadian Centre for Cyber Security in Ottawa, where it is reviewed by analysts. Any issues are then relayed back to the affected government agency to determine the necessary actions.
While the CSE has not released specific information on the effectiveness of the sensors in countering cyber attacks, it has shared 150 'prevention and detection' reports with territorial and provincial governments, which account for just five percent of sensor deployments. The North has seen a number of high-profile incidents, including a ransomware virus that crippled Nunavut government operations in 2019, an intrusion in 2022 that cost the Northwest Territories government over $700,000 to contain, and a ransomware threat that led the City of Yellowknife to take its services offline for a week in 2025. A wider breach of cloud software affected the operations of multiple N.W.T. school boards last year.
The growing federal investment in the North, announced by Prime Minister Mark Carney in March, is raising interest among those looking to access and manipulate computer networks. From a cybersecurity perspective, threat actors could use cyber methods to gain insight into and exploit this investment. The sensors protect users' privacy and identify suspicious activity without reading emails or documents, but some have raised concerns over the way in which the CSE operates and handles the information it collects. Intelligence Commissioner Simon Noël highlighted the 'improper' sharing of information with international partners between 2020 and 2023, where data pertaining to Canadians had not been removed. More than a decade ago, the British Columbia Civil Liberties Association filed a lawsuit challenging the constitutionality of the CSE's electronic surveillance operations.
Aislin Jackson, a lawyer with the civil liberties association, emphasized the importance of recognizing that it's not just the contents of our communications that we have an interest in privacy in but also our physical movements, which can be tracked by metadata. Metadata can be incredibly revealing, and it's not enough to say we respect privacy because we are not touching the content, even if that's true. The Northwest Territories Office of the Chief Information Officer referred a request for comment to the CSE, and a spokesperson for the Yukon government said a variety of vendors and partners help protect government networks, but would not disclose specific tools or systems used. The Nunavut government's informatics planning and services branch did not respond to a request for comment.
In conclusion, the deployment of digital sensors by the CSE in the North is a significant step towards securing computer networks and preventing cyber attacks. However, it also raises important questions about privacy and the handling of sensitive information. As the North continues to develop and attract investment, it is crucial to ensure that cybersecurity measures are effective and that the privacy of individuals and organizations is protected.
