Diversifying Cybersecurity

Amanda: This is the Forefront — a Toronto Metropolitan University podcast about big problems and smart solutions. 

I’m Amanda Cupido. 

So here’s the problem: Cybersecurity is one of the most critical challenges of our time. Digital networks have become the core to how most people work, communicate and share personal data. Securing those networks is important for the safety and security of society.

A recent breach was in Stratford in April 2019. An attacker had installed malware into six of the city’s physical servers and two of their virtual servers and then encrypted all systems. Staff were completely locked out and could not find a way back in. They were left to negotiate with the attacker and pay more than $75,000.

Personal attacks are also an issue. 57% of Canadians say that they have been a victim of a cybercrime... That’s According to the July 2020 report by the Cybersecure Policy Exchange at Toronto Metropolitan University,

So, I think you’re getting the picture.

At the same time — cybersecurity is also one of the fastest growing economic sectors...

But there is a shortage of people for these roles. It’s estimated there are 10,000 cybersecurity roles that are currently unfilled in Canada. 

On top of that — the cybersecurity industry, like many others, has a lot of work to do when it comes to diversity. 

Essentially, we’re dealing with both a skill shortage and a lack of diverse candidates.

Rushmi: The main obstacle is being able to feel, first of all, I belong here, I earned my way into this and now I know that there are industries and companies, who need me, who want me for my skills and my abilities.  

Amanda: That’s Rushmi Hashan — she’s spent nearly 15 years as an entrepreneur in the tech sector. She says that for every open job in the cybersecurity industry, only about 20-30% of the applicants are women. 

Rushmi: I think as women, the roadblocks that we face in a profession that's dominated heavily by men traditionally. It is that whole internal dialogue that we face “I don't know enough, I’m not going to be good enough to apply for that role. Do I have the right skills, do I have the right training, how will I be viewed coming into the industry?”

Amanda: She adds this mindset is also very common for newcomers to Canada and displaced workers — people who’ve lost their job due to technology disruption — where their specific skills are no longer in demand...

Which is  what happened to Andy Maharaj. He studied Computer Science in 1984.

Andy: When I graduated there was no internet there was no personal computing and when I did use those things throughout my career which I used all the time, I used it more as a consumer and not as a producer of information or as somebody who didn’t know much about the technical background of personal computing and the internet. Really I could put my resume on one line because I’ve worked in the same business, basically the same organization for 35 years. 

Amanda: about 3 years ago, the company he was working for decided to get out of the business.

Andy: Since then I’ve spent that time looking for employment and was unsuccessful. 

Amanda: He considered going back to school but had some initial hesitation

Andy: I think any student whenever they do any type of program, even starting from kindergarten, all the way through school all the way through higher education, and even when you start your job you kind of wonder to yourself internally “Am I good enough for this? Will I pass? Will I enjoy the class? Will I meet new people? Will it be a terrible experience? Will it be something where I say I never want to do anything like this ever again?” So there’s always self doubt I think whenever you start something new.

Amanda: That’s when he came across the Rogers Cybersecure Catalyst accelerator program, where Rushmi is the Director of certification and Training. 

Rushmi: So our program is open, first of all for individuals who have a minimum of a high school diploma. Our program starts off with ensuring that anyone who does not have a technical background should be able to come into the program and still succeed. So we really do look for that diversity of skills and experience and the training program is designed to be able to bridge that knowledge that they do not have about technology and quickly accelerate them. What excites me is that we have removed as many barriers as possible to invite individuals into a career in cybersecurity. 

Amanda: Learners in the program earn two Global Information Assurance Certifications — one in Security Essentials and the other as Certified Incident Handler. These are recognized worldwide, but require some intense testing. 

Andy: The first certification, it’s a five hour exam. Which involved basically a deep dive into all areas of cybersecurity. So keep in mind that the last exams I wrote was in 1984, and so to write a five hour exam is quite daunting. I mean obviously I didn’t sleep well the night before. Then believe me it was a proud feeling when I realized I passed the exam and so I was very pleased and I let all my friends and family know and I was extremely proud. I thought to myself, well this is great, I showed to myself and to my family and to my son that’s in grade 9 that I can learn new things and new technology and that I can manage and it was a great feeling of accomplishment. 

Amanda: And Andy wasn’t the only one who passed from his class… 

Rushmi: We have one of the highest pass rates of a class from the entire world of professionals who have taken this exam. It’s huge, it’s a big deal. 

Amanda: It’s this kind of traction that has led to Canada being a leader in cyber security, according to Charles Finlay, the executive director of the rogers cybersecure catalyst

Charles: Canada has very recently been ranked number four in the world for cybersecurity investment. But to maintain its leadership position, or to grow its leadership position, it needs to do a few things. There needs to be a real collaboration between private sector entities and governments and the public sector and academic institutions.And that’s where an institution like the Rogers Cybersecure Catalyst, which sits at the centre of government, academia and the private sector can be incredibly important.   

Amanda: The catalyst is a not-for-profit, owned by Toronto Metropolitan University and backed by partners including Rogers, RBC, the government of Canada and the city of Brampton.  

Charles: The Rogers Cybersecure Catalyst is a centre for innovation and collaboration in cybersecurity and it is based in Brampton Ontario. It is active in four general areas. It does a fully funded training program for women, new Canadians and displaced workers, in partnership with SAMS, which is the world's largest cybersecurity training firm. It helps scaling up cybersecurity companies through a commercial accelerator that is run with the help and support of the DMZ it supports applied research and development work across the university. And it engages in public education and policy work.  

Amanda: The Catalyst launched in August 2018 and Charles says is completely unique. 

Charles: The Catalyst was established to really be a national hub for cybersecurity activities with a view to protecting Canadians and Candian businesses. And with a view to helping Canadians and Canadian businesses seize the opportunities of cybersecurity.  

Amanda: And for people like Andy, it’s been life-changing

Andy: I consider myself very fortunate to be in the program. I’ve learned a lot. I've met a lot of interesting people that are like minded and are caring individuals as well. But also we we’re being led by a really nice group of people in Brampton that are working at the Catalyst. But I think if anything this program has shown me hey you know what I had some of that self doubt based on that lack of technical experience and I did it! I did it! 

Amanda: Wrapping up — it’s clear to see the gaps in Canada’s cyber security sector  BUT with learners like Andy and leaders like Rushmi and Charles, I feel like we’re going to be taking advantage of some real opportunities in the industry. 

A final word from Charles about Toronto Metropolitan University’s role in all of this… 

Charles: Toronto Metropolitan University is the perfect home and the perfect platform for Rogers Cybersecure Catalyst to grow and thrive for a number of reasons. Ryersons entrepreneurial spirit as well as its commitment to city building and advancing the public's interest means that it is a place where the Rogers Cybersecure Catalyst, which has as its mandate to support Canadians and Canadian businesses and help them thrive in cybersecurity. In addition to that there is really important research work going on in cybersecurity at Toronto Metropolitan University and the Rogers Cybersecure Catalyst wants to leverage all of that work  so Toronto Metropolitan University is a critical partner for the Rogers Cybersecure Catalyst and without Toronto Metropolitan University the Rogers Cybersecure Catalyst would obviously not be possible.   

Amanda: This podcast was created for alumni and friends by University Advancement at Toronto Metropolitan University. Special thanks to our guests on today’s episode: Andy Maharaj, Rushmi Hashan and Charles Finlay. I’m your host, and proud Toronto Metropolitan University grad, Amanda Cupido. For more information on the Rogers Cybersecure Catalyst, and more episodes of this podcast and others, visit torontomu.ca/alumni/podcasts (opens in new window) .