Canadian Standard for Digital and Other Trust and Identity Under Review, Comments Invited

The CIO strategic advice announced that he is now invite comments on the draft second edition of the National Standard of Canada on the fundamental principles of digital trust and identity (CAN/CIOSC 103-1: 2020, Digital trust and identity – Part 1), which specifies the minimum requirements and a set of controls to create and maintain trust in digital systems and services that affirm and/or accept identity and identification data relating to people and organizations.

Accredited by the Standards Council of Canada, the CIO Strategy Council is made up of chief information officers and technology leaders who have joined forces to work on common digital priorities. It is published and in progress standards encompass more than a dozen areas, including agricultural blockchain, artificial intelligence, cybersecurity, connected cities, online voting, open finance, procurement, healthcare, digital skills, digital identity, open finance, etc.

Each standard includes a timeline for its review – in the case of digital trust and identity, it began one year after publication due to the rapidly changing landscape – which may result in changes, additions or even withdrawal from the norm. However, said CIO Strategy Council executive director Keith Jansa, any stakeholder can submit comments at any time and the technical committee is required to review them and take appropriate action.

“Whatever standard the CIO Strategy Council produces, as long as they are Canada’s national standards, they are suitable for global use, to inform stakeholders here at home and abroad. overseas, expectations for products, services and people, and with this particular standard, ensuring that Canadian interests are taken into consideration when creating new digital identity programs around the world.” , did he declare. “A lot of what we’re seeing is that when it comes to a country’s competitiveness, our well-being, economic and non-economic dimensions, with legislation and regulation that doesn’t keep pace with technological change, it is necessary to build consensus on the expectations of products, services and people in the space.

Two unpublished standards are also open for public review and comment: CAN/CIOSC 112-20XX, National Occupational Standard for the Cybersecurity Workforceand CAN/CIOSC 100-8:20xx, Data Governance – Part 8: Framework for Geo-residency and Sovereignty.

Comments on the second edition of Digital Trust & Identity – Part 1 are due by September 21, 2022. Comments on the National Occupational Standard for the Cybersecurity Workforce are due by October 21, 2022, and feedback on the data governance standard is awaited. by October 31, 2022.