When critical systems â power, water, hospitals, government data â can be reached, stolen or shut down from a keyboard, often from abroad.
Cyber threats cover attacks on digital systems: intrusions to steal data, ransomware that locks services, and sabotage of the networks running electricity, water, finance and government. Some are criminal; the most serious are state-backed.
What makes them distinct: an attacker can strike from anywhere, cheaply and deniably. A single breach can expose millions of records or darken a city â and attribution is slow and uncertain.
Canada's infrastructure is deeply connected and increasingly digital. The Communications Security Establishment (CSE) has repeatedly warned that state-sponsored actors probe critical infrastructure and that ransomware is the most disruptive everyday threat.
Defending the network means watching the network â which collides with privacy. A national cyber shield protects hospitals and grids, but the same monitoring capacity, unchecked, is exactly the surveillance overreach BEAVER.WATCH warns about.
Three documented moments show the threat moving from the edges to the core of Canadian life.
In early 2011, a sophisticated intrusion hit the Department of Finance and Treasury Board, cutting their internet access for weeks. It was an early, public sign that government itself was a target.
Even the centre of government is reachable. Cyber defence is not optional infrastructure.
In 2014, Canada took the rare step of publicly attributing a major intrusion at the National Research Council to a highly sophisticated state-sponsored actor â a shift toward naming attackers.
Attribution is a political choice with diplomatic costs â and a deterrent only if you are willing to pay them.
Through the 2020s, ransomware crippled hospitals, pipelines and city services across North America. The CSE's National Cyber Threat Assessments named ransomware the most disruptive threat to Canadians and warned that critical infrastructure is a deliberate target.
The everyday threat is no longer espionage alone â it's services going dark. Resilience matters as much as secrecy.
Where no public, verifiable figure exists, BEAVER.WATCH describes the situation in qualitative terms rather than invented numbers. The one numeric benchmark used elsewhere on the site â the 2%-of-GDP defence target â is a public NATO goal.
The simulation lets you choose how hard, and how intrusive, to go.
Centre, critical-infrastructure standards, cyber intelligence. Attacks recede clearly.
COST: HEAVY BUDGET ¡ PRIVACY RISKProtect grids and hospitals only. Partial effect, less intrusive.
COST: MODERATE ¡ PARTIAL COVERAGEName attackers and respond diplomatically. Deterrent, but escalatory.
COST: DIPLOMATIC FRICTIONThe cyber dilemma: the monitoring that protects the grid is the same monitoring that can watch citizens. Capability without oversight is how a shield becomes a surveillance tool.