Bruce Schneier provides some advice on setting national policies for improving security. This applies to Canada too.
Security Matters: Memo to Next President — How to Get Cybersecurity Right
I have three pieces of policy advice for the next president, whoever he is. They’re too detailed for campaign speeches or even position papers, but they’re essential for improving information security in our society. Actually, they apply to national security in general. And they’re things only government can do.