The Canadian Centre for Cyber Security has rolled out the Critical Infrastructure Resilience and Escalated Threat Navigation initiative, geared towards helping organizations with essential services maintenance in the event of major cyber disruptions.
The center noted that cyber incidents have increased in frequency, disruptiveness, and sophistication. The heightened use of artificial intelligence and automation have intensified the spread of malicious activity; moreover, geopolitical volatility is escalating state‑driven cyber operations risk.
The Cyber Centre suggested that state-sponsored actors could target critical infrastructure systems like energy, telecommunications, transportation and water in response to geopolitical tensions. Non-state actors could be seeking financial benefit.
The disruption of critical infrastructure could lead to service outages, economic losses, and public health and safety risks – even loss of life in extreme cases. They could also undermine national sovereignty, per the center.
Thus, the CIREN initiative outlines the following key cyber readiness and resilience actions for organizations:
- Preparation for critical systems to be isolated for up to three months
- Development and trial of response plans to run independently
- Development of system rebuilding plans following significant cyber incidents
“Cyber threats to critical infrastructure are evolving and complex – but preparing for them doesn’t need to be. The time to act is now. Simple steps, such as isolating systems and planning to operate independently, can make a real‑world difference,” Cyber Centre head Rajiv Gupta said in a statement. “With the launch of CIREN, the Cyber Centre is helping organizations prepare for an increasingly challenging cyber threat landscape.”
The initiative is part of the Cyber Centre’s advice and guidance suite concentrating on cyber readiness for critical infrastructure organizations. The center is also working with critical infrastructure owners and operators through regular briefings and collaborative forums.
The Cyber Centre also issues threat bulletins and conducts cyber risk assessment briefings. It highlights indicators of compromise to aid in intrusion detections.
The center sent over 300 pre-ransomware notifications in 2024. It also issued advisories, alerts, and cyber flashes according to the urgency and sensitivity of warnings.