Key result 1 Information that is personal or confidential will be secure.
Why this matters
Technology is evolving quickly, providing hackers with new ways to attack us such as stealing our credit card information or hijacking our health data and demanding money to get it back. The good guys need to be equally responsive, to keep one step ahead. That’s one reason why we have this overarching strategy as well as Enabling Our Digital Future Securely (Government of New Brunswick’s specific Cyber strategy).
How we’ll do it
Improve risk ownership and management
Encourage a culture of risk ownership and management, and manage risks through the appropriate channel – either owned and managed by the department or agency (who have all been trained in cybersecurity and privacy), or escalated to government executive if the risk might impact multiple groups of New Brunswickers.
How we’ll measure progress
A key performance indicator: Regular Threat Risk Assessments of government digital assets
Key result 2 Government and citizens have secure and trusted access to information.
Why this matters
Using consistently secure, privacy-protected online services will help increase New Brunswickers’ confidence in government.
How we’ll do it
Foster increased citizen trust in government services
We will deliver services that are secure by design, and clearly explain what data is being collected and how it is being used within government.
How we’ll measure progress
A key performance indicator: New Brunswickers have higher awareness of how government protects their information
Key result 3 Nothing about you will happen without you.
Why this matters
You own your information; we are its custodians. Since the 2020 Protection of Privacy Policy, all staff in departments and central agencies complete not only cybersecurity but specific privacy training, because, as with cybersecurity, we are only as strong as our weakest link. Now we need to take the next step and consider cyber, privacy, and resiliency by design from the start (not after we design) in every service we create with and for New Brunswickers.
How we’ll do it
Ensure privacy, security and resiliency by design
Your information privacy, how we will keep your information safe, and how our systems will be resilient to avoid outages and repel attacks, will all be primary considerations when we design new services.
How we’ll measure progress
A key performance indicator: Government departments will demonstrate that they have included information privacy, resiliency, and security elements as part of the original design of all new services
When we get there
Kabir
Kabir logs in to the government website to renew his Driver’s Licence. With his digital credentials and password, he is confident that his information privacy is protected and his data is secure. He expects that he will get good service this time no matter who he deals with, because he always has. His older children are learning in school about privacy and their digital rights, so they know how to protect themselves online.
Stephanie
Stephanie’s team is designing a new service with help from a focus group of New Brunswickers. The team takes a simple, risk-based approach to ensure they put the right cyber and information privacy protection in place within the service, by inviting their Departmental Information Security Officer and Privacy Officer to the project meetings.