Enterprise Security Service Edge

Description

This Privacy Impact Assessment (PIA) addendum addresses the handling of personal information within the Enterprise Security Service Edge (ESSE) service, formerly known as the Cloud Access Security Broker. ESSE uses Netskope, a software-as-a-service vendor, to enhance security measures. This addendum serves to complement the existing Enterprise Perimeter Security (EPS) PIA, completed in 2020.

Netskope facilitates SSC’s ESSE service offering. The Netskope Security Cloud, built on Netskope Intelligent Security Service Edge provides real-time visibility into cloud services, website and private applications accessed from GC devices. This complements EPS services, enhancing security and monitoring.

Why a privacy impact assessment was completed

A PIA addendum was triggered in accordance with the Directive on Privacy Practices, Appendix C: Standard on Privacy Impact Assessment, which states: “When substantial modifications are to be made to an existing program or activity that uses personal information for an administrative purpose, including through the use of any new or modified information technology or other process.”

Additional information

Opportunities were identified to improve the privacy posture for this initiative:

• An oversight was corrected by updating and submitting the personal information bank to the Treasury Board of Canada Secretariat for registration, ensuring compliance with the required protocols.
• To reflect the latest guidelines, we have refreshed the Privacy Notice Statement to meet the standards set forth in the Directive on Privacy Protection.
• At the time this addendum was initiated, ESSE had not yet completed the Security Assessment and Authorization (SA&A) process. However, by the time the PIA addendum received SSC management approval, the SA&A process had been fully completed.

Related personal information banks

• Information Technology Class of Record (PRN 932)
• Electronic Network Monitoring Personal Information Bank (PSU 905)

For more information about this privacy impact assessment

Access to Information and Privacy Coordinator
99 Metcalfe Street
3rd Floor, Room 308
P.O. Box 9808, Station T CSC
Ottawa, Ontario K1G 4A8

Email: ATIP-AIPRP@ssc-spc.gc.ca