Keep It Safe
Label early, label often!
Classifying and labelling information allows information to be safeguarded based on its sensitivity level. Start your 2024 right by taking extra care to apply the correct label to all documents you create within the guidelines of your own organization, and always protect information you receive from others based on the sensitivity label.
Pledge to report privacy breaches!
There are obligations when we have cause to believe that a privacy breach has occurred within a public sector program or service. Review Chapter 12 of the Freedom of Information and Protection of Privacy Manual and the Office of the Information and Privacy Commissioner of Ontario.
In With the New
Make supplier risk a priority in 2024!
Modern attackers sometimes gain access to organizations through their suppliers. Approach all new procurement activities and vendor access with this in mind! In particular, check to ensure your old procurement forms, documents and contracts are up date in 2024. Start fresh where possible- some of the assumptions in old procurement documents may no longer hold true, and re-use could mean risk.
Take a fresh look at passwords!
The Ontario Cyber Security Division is currently seeking improved ways to manage passwords. A good starting point for the new year is to ask yourself if you have passwords that could use a refresh (for being too short, easily guessed, lacking special characters and numbers), or if you are using the same password between different services or sensitive systems. Keep cyber safe by using multiple, complex passwords for all your accounts.
Keep It Real With Artificial Intelligence
Set a goal that’s transparent!
Do you use artificial intelligence (AI) services, like ChatGPT, in your work? One important public service principle for AI use is that it shouldn’t be used in secret. That means following official directives on when to use services or features that rely on AI, documenting how and when AI is used, retaining the prompts and output involved, citing the tools or services used, and being clear with citizens. For more on responsible AI use, refer to Ontario’s Principles for Ethical Use of AI.