Enterprise cyber security services
Shared Services Canada (SSC) manages, engineers and operates the cyber security infrastructure that protects Government of Canada (GC) data and technology assets. Strong cyber security defences are vital to protect the GC’s ability to continuously deliver services to Canadians.
To more proactively safeguard the GC’s digital infrastructure, we are advancing a number of initiatives designed to strengthen federal cyber security resilience, including:
- implementing attack surface management, including continuous vulnerability management and security control assessments
- deploying enterprise-level endpoint protection for real-time visibility into all endpoint devices connected to GC networks and enhanced detection and response capabilities
- collecting and analyzing security logs in real time to proactively identify potential security incidents
By providing the GC with trusted enterprise solutions and technologies to protect the federal government’s IT infrastructure, we are driving efforts to support the security services outlined below.
Endpoint security services
We deliver cyber security solutions to help protect, monitor and assess endpoints (servers, workstations, mobile devices and cloud workloads). This ensures device health, compliance, and rapid detection and response to threats.
- Endpoint Visibility and Awareness (EVA)
- Endpoint Protection
Boundary security services
We help secure and control traffic entering, exiting and moving across GC networks through policy-based enforcement, inspection and threat prevention at network and application boundaries.
- Unified Threat Management (e.g., firewalls, intrusion detection and prevention systems)
- Distributed Denial of Service (DDoS) protection
- Web Application Firewall (WAF)
Enterprise network and security monitoring services
We provide centralized visibility, logging, correlation and analytics across GC environments to detect anomalous activity, security incidents and emerging threats in near real time.
- Enterprise Security Monitoring
- Enterprise Network Monitoring
Enterprise vulnerability management services
We continuously improve the services to identify, assess, prioritize and coordinate remediation of vulnerabilities across GC assets to reduce exposure and minimize the risk of exploitation.
- Vulnerability Management Services (VMS)
- Self-Service Vulnerability Analytics Portal (SVAP)
Advanced cyber defence services
We support the GC in proactively identifying, simulating and responding to advanced and persistent cyber threats through a combination of offensive and defensive capabilities.
- Offensive services: penetration testing, red teaming
- Defensive services: threat intelligence, threat hunting, sandboxing