{"id":200930,"date":"2019-02-05T02:59:27","date_gmt":"2019-02-05T07:59:27","guid":{"rendered":"https:\/\/canadianinquirer.net\/v1\/?p=200930"},"modified":"2019-02-05T02:59:27","modified_gmt":"2019-02-05T07:59:27","slug":"chief-electoral-officer-worries-parties-are-weak-link-in-cybersecurity-chain","status":"publish","type":"post","link":"https:\/\/canadianinquirer.net\/v1\/2019\/02\/05\/chief-electoral-officer-worries-parties-are-weak-link-in-cybersecurity-chain\/","title":{"rendered":"Chief electoral officer worries parties are weak link in cybersecurity chain"},"content":{"rendered":"
\"\"<\/a>
Moreover, with thousands of volunteers involved in campaigns, he said it’s difficult to ensure no one falls prey to \u201cfairly basic cyber tricks,\u201d like phishing, that could inadvertently give hackers access to a party’s databases. (Pixabay Photo)<\/figcaption><\/figure>\n

OTTAWA \u2014 Canada’s chief electoral officer is \u201cpretty confident\u201d that Elections Canada has good safeguards to prevent cyberattacks from robbing Canadians of their right to vote in this year’s federal election.<\/p>\n

But Stephane Perrault is worried that political parties aren’t so well equipped.<\/p>\n

\u201cThey don’t have access to the resources we have access to,\u201d Perrault said in an interview Monday, noting that \u201csecuring (computer) systems is quite expensive… Even the larger parties have nowhere near our resources and you’ve got much smaller parties with very little resources.\u201d<\/p>\n

Moreover, with thousands of volunteers involved in campaigns, he said it’s difficult to ensure no one falls prey to \u201cfairly basic cyber tricks,\u201d like phishing, that could inadvertently give hackers access to a party’s databases.<\/p>\n

\u201cYou can spend a lot of money on those (security) systems and if the human (fails), that’s the weak link.\u201d<\/p>\n

Elections Canada has been training its own staff to resist such tricks and, along with Canada’s cyberspying agency, the Communications Security Establishment, will be meeting with party officials again next week to reinforce the need to train their volunteers.<\/p>\n

Perrault said he was \u201creally disappointed\u201d that omnibus legislation to reform Canada’s election laws, passed just before Christmas, did not include measures to impose privacy rules on parties, which have amassed huge databases of personal information on voters. At the very least, he said, Canadians should be able to find out what information a party has collected on them and demand that it be revised or removed.<\/p>\n

The legislation requires only that parties publish a policy for protecting personal information. There is no requirement to report a breach and no oversight by the privacy commissioner.<\/p>\n

Should a party’s computer system be hacked and the information used to embarrass the party, as occurred to the Democrats during the 2016 U.S. presidential contest, Perrault said Elections Canada would have no role in investigating the matter.<\/p>\n

That would be up to security authorities and the party involved. Under a \u201ccritical election incident protocol\u201d announced last week, five senior bureaucrats would be empowered to decide when an incident is serious enough to warrant publicly disclosing it in the midst of a campaign.<\/p>\n

Elections Canada would only be involved if a hacker used the information gleaned from a party’s databases to interfere with Canadians’ right to vote \u2014 for instance, by spreading disinformation about how, where and when they should vote.<\/p>\n

\u201cThe important thing is that Canadians are not prevented from voting. From my perspective, that’s the No. 1 priority,\u201d Perrault said.<\/p>\n

In its own operations, Perrault said Elections Canada has done everything it can to prevent cyberattacks.<\/p>\n

\u201cOverall, I think we’re pretty confident we are where we need to be at this point.\u201d<\/p>\n

But he added: \u201cIt’s certainly uncharted territory for us. We’ve seen the Americans go through this and Brexit and France and Germany, so we have a sense of the potential out there. But we’ve never had to prepare for an election like this.\u201d<\/p>\n

Since the 2015 election, Perrault said Elections Canada has rebuilt its information-technology infrastructure with sophisticated security improvements, based on advice from the Communications Security Establishment, which now monitors those systems 24 hours a day, seven days a week.<\/p>\n

\u201cNo system is 100-per-cent proof but they’re much more concerned about the parties than about Elections Canada,\u201d Perrault said.<\/p>\n

In addition, he said the agency has set up a team to monitor social media and to quickly counter any disinformation about the right to vote. As well, it will have a repository on its website of every public communication from Elections Canada so that individuals can verify the legitimacy of information they see on social media or elsewhere that purports to be from the agency.<\/p>\n

\u201cWe really want to be the trusted source of information on the electoral process.\u201d<\/p>\n

The recently passed legislation included a number of measures aimed at preventing foreign interference and deliberate disinformation campaigns in Canadian elections, including giving the commissioner of elections greater powers to investigate and compel testimony, prohibiting the use of foreign money and requiring social-media giants to keep a registry of all political ads posted on their platforms.<\/p>\n

But arguably the best hedge against cyberattacks is the fact that Canada still relies on paper ballots that are counted by hand.<\/p>\n

\u201cYou can’t hack that,\u201d Perrault said.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

OTTAWA \u2014 Canada’s chief electoral officer is \u201cpretty confident\u201d that Elections Canada has good safeguards to prevent cyberattacks from robbing …<\/p>\n","protected":false},"author":44,"featured_media":200937,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,16],"tags":[],"class_list":["post-200930","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news-ca","category-news","mauthors-joan-bryden","mauthors-the-canadian-press"],"_links":{"self":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/200930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/comments?post=200930"}],"version-history":[{"count":0,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/200930\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media\/200937"}],"wp:attachment":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media?parent=200930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/categories?post=200930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/tags?post=200930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}