Cybersecurity
This library of reference materials contain documents published by authoritative and informed sources that can assist your organization with practical, helpful guidance towards reducing cybersecurity risks and protecting personal information.
For the purposes of this Library, sources are defined as:
Includes guidance for emergency checklists, notification matrices, emergency indicators, response expectations, and approved actions.
Authoritative Source: Information System Audit and Control Association (ISACA)
Open ResourceA printable template to help document and report a suspected or confirmed privacy breach.
Authoritative Source: Office of the Information and Privacy Commissioner BC (OIPC)
Open ResourceA resource guide to help respond to a privacy breach in accordance with BC privacy legislation.
Authoritative Source: Office of the Information and Privacy Commissioner BC (OIPC)
Open ResourcePractical steps on protecting against ransomware threats and recovering from ransomware attacks.
Authoritative Source: NIST National Institute of Standards and Technology
Open ResourceShort, straightforward advice on securing networks and systems, securing the end user, and responding to a compromise or attack.
Authoritative Source: Center for Internet Security
Open ResourcePractical recommendations for staff, including avoiding unknown links, suspicious emails, fake offers, donation scams, and investment schemes.
Authoritative Source: US Federal Trade Commission
Open ResourceGuidance to protect against malicious emails, attachments, websites, and other fake COVID-related cyber activity.
Authoritative Source: Canadian Centre for Cyber Security
Open ResourceRecommendations from a lawyer specializing in cybersecurity on managing COVID-19 cybersecurity risks from a people, process, and technology perspective.
Informed Source: BLG (Borden Ladner Gervais LLP)
Open ResourcePractical recommendations to create a secure remote environment and educate staff in cybersecurity practices.
Authoritative Source: Australian Cyber Security Centre
Open ResourceA brief summary for executives with suggestions on physical, supply chain, and cybersecurity issues connected to COVID-19.
Authoritative Source: US Department of Homeland Security: Cybersecurity & Infrastructure Security Agency (CISA)
Open ResourcePractical advice for securing home networks, including routing devices, wireless network segmentation, confidentiality, and more.
Authoritative Source: National Security Agency
Open ResourceGuidance on secure wireless networks, phishing, protecting information, locking devices, storing documents securely, and reporting lost or stolen devices.
Authoritative Source: BC Office of the Information and Privacy Protection Commissioner (OIPC)
Open ResourceRecommendations for staff working from home, including new accounts, access, chat rooms, video teleconferencing, document sharing, and SaaS applications.
Authoritative Source: National Cyber Security Centre
Open ResourceGuidance on password management, security patches and updates, phishing, and online social distancing.
Authoritative Source: Cyber Readiness Institute
Open ResourceA shareable PDF with practical guidance for working outside of the office.
Authoritative Source: National Cyber Security Alliance
Open ResourcePractical advice designed to be shared with teleworking home and remote office users.
Authoritative Source: National Institute of Standards and Technology (NIST)
Open ResourceMitigations and general guidance, including product-specific guidance for Google Hangouts, Slack, Microsoft Teams, Zoom, and GoTo Meeting.
Authoritative Source: Canadian Centre for Cyber Security
Open ResourceA Zoom publication with guidance on waiting rooms, admitting participants, removing participants, and other meeting security settings.
Informed Source: Zoom Communications
Open ResourceInformation on encrypted email providers and why email encryption matters.
Informed Source: Privacy Canada
Open ResourceNIST Special Publication 800-177 Revision 1, a technical reference for small to medium organizations.
Authoritative Source: National Institute of Standards and Technology (NIST)
Open ResourceGuidance on risk/benefit assessment, cloud services contracts, and oversight/monitoring.
Informed Source: BLG (Borden Ladner Gervais LLP)
Open ResourceCanadian Government recommendations designed for small and medium sized organizations.
Authoritative Source: Canadian Centre for Cyber Security
Open ResourceA security self-assessment designed for organizations, with simple questions and minimum security requirements.
Authoritative Source: BC Office of the Information and Privacy Protection Commissioner (OIPC)
Open ResourceNote: Some references cited below are identified as originating from informed sources, rather than authoritative ones. Discretion should be used when reviewing information from informed sources, including the potential for author bias.
Informed Source
Open ResourceInformed Source
Open ResourceAuthoritative Source
Open ResourceAuthoritative Source
Open ResourceAuthoritative Source
Open ResourceAuthoritative Source
Open ResourceInformed Source
Open ResourceInformed Source
Open ResourceInformed Source
Open ResourceAuthoritative Source
Open ResourceAuthoritative Source
Open ResourceAuthoritative Source
Open ResourceFunding is generously provided through the Ronald S. Roadburg Foundation
