CCCS

The Canadian Centre for Cyber Security (CCCS) is Canada's unified national cyber authority, established in 2018 as a branch of the Communications Security Establishment (CSE), the country's signals-intelligence agency. It serves as Canada's single point of contact for cybersecurity guidance, Incident Response for critical infrastructure, and foreign intelligence sharing on cyber threats within the Five Eyes framework. CCCS co-signed the 22 June 2026 Five Eyes joint statement on AI cyber risk alongside CISA, NCSC, ASD, and NCSC-NZ, declaring that frontier models place AI-enabled mass exploitation at a months-horizon threat.

CCCS publishes the National Cyber Threat Assessment every two years, which has tracked ransomware against critical infrastructure, state-sponsored espionage (primarily attributed to China, Russia, and Iran), and the growing use of AI tools by criminal actors. Canada's federal government and Crown corporations are primary clients for CCCS Incident Response, but the centre also runs public-facing programmes for small businesses and municipal governments. Its threat-sharing role within CSE means it ingests signals intelligence that individual Canadian government departments do not independently access.

Canada's position in Five Eyes is particularly significant for Arctic and Pacific monitoring, and CCCS contributions inform allied assessments of Russian and Chinese threat actor patterns that are lighter in UK or Australian signals coverage. As a mid-sized economy with dense integration into US supply chains, Canada serves as a useful test case for spillover attacks targeting US critical infrastructure through allied networks. CCCS's advisory posture is generally aligned with CISA's, with the June 2026 AI statement being representative: Canada rarely leads Five Eyes cyber positions but consistently co-signs and domestically amplifies them.