Canada Spends Logo
Follow Build Canada

Explore our Budget 2026 analysis

Program directory · Shared Services Canada

Security

Program code
BYE06 (SHARE)
Core responsibility
Common Government of Canada Information Technology (IT) Operations
In Departmental Plans
2021-22 – 2026-27 · New since an earlier plan

What it does

The security activities associated with this program are the management of risks, through the integration and compliance of identified security requirements into end-to-end operations of SSC managed IT infrastructure to ensure that people, information, assets and services are safeguarded in accordance with GC policy instruments, and that SSC and its customers manage the risks to each other or the government as a whole.

Source: the department's Program Inventory, via GC InfoBase.

History and lineage

First appears in GC InfoBase's actual spending by program in 2021-22. The data does not record when a program was created; it may be older than its first appearance here, which is limited by the sources (program spending starts in 2010-11, Departmental Plans in 2018-19).

2020-212021-222022-232023-242024-252025-262026-272027-282028-29Security 2020-21: $228MSecurity 2021-22: $139MSecurity 2022-23: $137MSecurity 2021-22: $191MSecurity 2022-23: $191MSecurity 2023-24: $262MSecurity 2024-25: $241MSecurity 2025-26: $307MSecurity 2026-27: $221MSecurity 2027-28: $248MSecurity 2028-29: $246MSecuritySecurity
Bars: spending by fiscal year (dark: actual; light: actual restated on the 2017-18 program structure; outlined: the latest plan's forecast; grey: related programs). Bands: each program in the lineage over the years it has data.
ProgramRelationYears with dataActual spending over those years
SecurityEarlier program (name match, high confidence)2020-21 – 2022-23$228M
SecurityThis program2021-22 – 2028-29$885M

Significant changes in scope and budget

Detected from the data: renames between plans, programs it appears to replace, merge with or split into (matched by name), year-over-year changes in spending of at least 25% and $5M, or in employees of at least 20% and 25 FTEs, linked budget measures, and results indicators added or dropped.

YearWhat changedSource
2021-22Appears to replace SecurityCanada Spends name match across plans (an inference)
2023-24Indicators dropped: % of enterprise systems deployed during the reporting period that have completed Security Assessment and Authorization (SA&A) prior to their deploymentDepartmental Results Framework (GC InfoBase)
2023-24Spending $262M, against $191M in 2022-23 (+37%).Actual spending (GC InfoBase)
2025-26Planned spending $307M, against $241M in 2024-25 (+27%).Latest Departmental Plan
2026-27Indicators added: Percentage (%) of Distributed Denial of Service (DDOS) attacks managed without causing a Cyber Incident outage impacting Government of Canada delivery of services to CanadiansDepartmental Results Framework (GC InfoBase)
2026-27Indicators dropped: Customer satisfaction with Shared Services Canada's cyber and Information Technology (IT) security servicesDepartmental Results Framework (GC InfoBase)
2026-27Planned spending $221M, against $307M in 2025-26 (−28%).Latest Departmental Plan

Success criteria

The program's indicators from its department's Departmental Results Framework: the target set in each year's plan, and the result reported the following year. Source: GC InfoBase.

Historical: targets against results

Percentage (%) of Administration Investigation requests related to Information Technology (IT) security incidents responded
Expected result: GC is supported by security compliance and performance reports on SSC's areas of responsibility, cyber security strategies, plans and roadmaps, and inputs to branch, departmental and government-wide security plans
100%2021-22✓ met100%2022-23✓ met100%2023-24✓ met100%2024-25✓ met

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2021-22≥ 100%2022100%Met
2022-23≥ 100%2023100%Met
2023-24≥ 100%2024100%Met
2024-25≥ 100%2025100%Met
Percentage (%) of time the enterprise secret-level network infrastructure is available to partners
Expected result: Partners have access to secret-level infrastructure to protect their sensitive information
99.9%2021-22✓ met99.8%2022-23✗ not met100%2023-24✓ met100%2024-25✓ met

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2021-22≥ 99.8%202299.9%Met
2022-23≥ 99.8%202399.8%
This indicator narrowly missed its target due to challenges in supporting legacy services that are scheduled for modernization. SSC continues to modernize the GC's secret infrastructure to provide higher availability and functionality via the GCSI next Generation project.
Not met
2023-24≥ 99.8%2024100%Met
2024-25≥ 99.8%2025100%Met
Percentage (%) of time the remote access services are available
Expected result: GC is supported with key security capabilities and services, including Secure Remote Access (SRA), Identity Credentials and Access Management (ICAM), and classified services
100%2021-22✓ met100%2022-23✓ met100%2023-24✓ met100%2024-25✓ met

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2021-22≥ 99.9%2022100%Met
2022-23≥ 99.9%2023100%Met
2023-24≥ 99.9%2024100%Met
2024-25≥ 99.9%2025100%Met
Customer satisfaction with Shared Services Canada's cyber and Information Technology (IT) security services
Expected result: Security-based Information Technology (IT) Infrastructure and Services are responsive to the needs of Government departments and agencies
4.072021-22✓ met3.952022-23✓ met3.912023-24✓ met4.022024-25✓ met

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2021-223.6 – 520224.07Met
2022-233.6 – 520233.95Met
2023-243.6 – 520243.91Met
2024-253.6 – 520254.02Met
% of enterprise systems deployed during the reporting period that have completed Security Assessment and Authorization (SA&A) prior to their deployment
Expected result: Government of Canada people, information, assets and services are safeguarded and secure
100%2021-22✓ met100%2022-23✓ met

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2021-22≥ 100%2022100%Met
2022-23≥ 100%2023100%Met

Current: the 2026-27 plan's targets

Percentage (%) of Administration Investigation requests related to Information Technology (IT) security incidents responded
Expected result: GC is supported by security compliance and performance reports on SSC's areas of responsibility, cyber security strategies, plans and roadmaps, and inputs to branch, departmental and government-wide security plans
100%2026-27

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2026-27≥ 100%2027—Planned
Percentage (%) of Distributed Denial of Service (DDOS) attacks managed without causing a Cyber Incident outage impacting Government of Canada delivery of services to Canadians
Expected result: Partners coordinate effectively with SSC to activate response mechanisms, enabling timely and organized actions that stabilize the situation and address immediate needs
98%2026-27

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2026-27≥ 98%2027—Planned
Percentage (%) of time the enterprise secret-level network infrastructure is available to partners
Expected result: Partners have access to secret-level infrastructure to protect their sensitive information
99.8%2026-27

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2026-27≥ 99.8%2027—Planned
Percentage (%) of time the remote access services are available
Expected result: GC is supported with key security capabilities and services, including Secure Remote Access (SRA), Identity Credentials and Access Management (ICAM), and classified services
99.9%2026-27

Bars: result reported. Dashed line: target.

Report yearTargetDueResultStatus
2026-27≥ 99.9%2027—Planned

Future goals: targets due after 2026-27

No targets with a later due date.

Spending and employees: planned against actual

Spending

2021-22: $149M2021-22: $191M2021-222022-23: $291M2022-23: $191M2022-232023-24: $373M2023-24: $262M2023-242024-25: $262M2024-25: $241M2024-252025-26: $307M2025-262026-27: $221M2026-272027-28: $248M2027-282028-29: $246M2028-29
Outlined bar: planned in that year's Departmental Plan (dashed: the latest plan, for years not yet reported). Filled bar: actual.
Show the numbers
Fiscal yearPlannedActual
2021-22$149M$191M
2022-23$291M$191M
2023-24$373M$262M
2024-25$262M$241M
2025-26$307M—
2026-27$221M—
2027-28$248M*—
2028-29$246M*—

Employees (FTEs)

2021-22: 7242021-22: 6702021-222022-23: 8112022-23: 7452022-232023-24: 1,3102023-24: 8482023-242024-25: 1,3502024-25: 9102024-252025-26: 8712025-262026-27: 8402026-272027-28: 8422027-282028-29: 8372028-29
Outlined bar: planned in that year's Departmental Plan (dashed: the latest plan, for years not yet reported). Filled bar: actual.
Show the numbers
Fiscal yearPlannedActual
2021-22724670
2022-23811745
2023-241,310848
2024-251,350910
2025-26871—
2026-27840—
2027-28842*—
2028-29837*—

Planned spending, plan by plan

Each row is one year's Departmental Plan and its forecast for the next three fiscal years; read a column down to see how the forecast for one year changed. The last row is what was actually spent. Click an amount for its source. Biggest changes in federal spending plans

Plan2021-222022-232023-242024-252025-262026-272027-282028-29
2021-22 plan$149,215,353$146,860,951$97,580,961
2022-23 plan$290,842,200$211,149,656$193,321,247
2023-24 plan$372,635,853$279,311,157$278,484,617
2024-25 plan$261,669,833$301,148,576$288,901,628
2025-26 plan$307,412,454$295,032,824$286,576,678
2026-27 plan$221,102,443$248,242,509$245,787,465
Actual$191,167,775$190,694,974$261,671,786$241,225,439

Actual spending is from Departmental Results Reports and the Public Accounts, as published in GC InfoBase. FTEs are full-time equivalents.