By virtue of the constitutional division of powers into federal and provincial jurisdictions, the governance of the provision of cyber security in Canada — and in comparable federal systems with constitutionally distinct levels of government, such as the United States and Australia — raises a host of policy-making challenges.

This special report’s authors ponder the division of authority and responsibility — for cyber, in general, and cyber security, in particular — between public and private actors and different levels of government. Drawing on expertise and insights from business, law, policy and academia, they posit normative models of cyber security governance and gauge the advantages and disadvantages of different approaches. Their contributions illuminate some preliminary lessons for policy makers striving to improve governance outcomes across the cyber domain in Canada.

This special report was produced by CIGI in collaboration with the the Smart Cybersecurity Network (SERENE-RISC), a knowledge mobilization network funded by Canada’s National Centres of Excellence.

About the Authors

David Mussington is professor of the practice and director, Center for Public Policy and Private Enterprise, University of Maryland, College Park, and a former senior fellow at CIGI. 

Benoît Dupont is a professor of criminology at the Université de Montréal, where he also holds the Canada Research Chair in Cybersecurity. 

Christian Leuprecht is the Class of 1965 Professor in Leadership in the Department of Political Science and Economics at the Royal Military College of Canada.

About the Editor

Christian Leuprecht is the Class of 1965 Professor in Leadership in the Department of Political Science and Economics at the Royal Military College of Canada.

Stephanie MacLellan is a digital democracy fellow with the Public Policy Forum.