54:45This recording is not available yet.
Breaking Down Silos: Strengthening Law Enforcement and Private Sector Partnerships to Combat Cybercrime
Download resourcesCategories
About this session
Lina Dabit, who leads the RCMP's Cybercrime Investigative Team in Toronto, speaks in French about the realities of policing cybercrime in Canada. She walks through the federal reporting landscape, the National Cybercrime Coordination Centre, the Canadian Anti-Fraud Centre and the Canadian Centre for Cyber Security, and why victims still struggle to know who to call. She details challenges specific to cyber investigations: legislation that has not kept pace, jurisdictional confusion between federal, provincial and municipal police, court delays tied to the Jordan ruling, and disclosure obligations that can mean reviewing terabytes of data per case. The core argument is that breaking down silos between public and private sector, and between individual police units, produces better outcomes than isolated investigations. She illustrates this with case studies involving RBC, the US Secret Service, and academic partners, and closes by urging attendees to build relationships with law enforcement before an incident happens rather than during a crisis.
The focus of this presentation is to present what the processes look like for reporting Cybercrime at the federal level, what the intake process looks like. What are the mandates of the National Coordination Centre (NC3) and Federal Policing Operations. A discussion around decision-making for federal, provincial or municipal jurisdictions. What have been the biggest challenges in policing when it comes to cybercrime and how have we addressed it. This presentation will also talk about challenges with recent case law, and how we share information. The RCMP in Toronto is building a regional model built around collaboration and breaking down silos, especially between public and private sector. I will also share success stories borne of the partnerships and some innovate approaches to working together.
Key takeaways
- Report every cybercrime incident, even small ones; reporting feeds the data that lets police and partners spot patterns and trends across sectors.
- Build a relationship with local and federal police before an incident hits, not during one; it speeds up response and clarifies what evidence they will need.
- Expect heavy disclosure obligations in cyber cases: investigators may need to review a dozen or more terabytes of data per file, so plan retention and forensic capacity accordingly.
- Preserve evidence as soon as an incident is discovered (indicators of compromise, ransom notes, related emails) rather than waiting for police to ask for it.
- Treat the ransom-payment decision as a business call, not a security one, and get full information on the risks of paying before deciding.
Speakers
Lina Dabit
Lina Dabit joined the RCMP in 1994 and started her career in BC working a variety of duties ranging from uniform patrol, drug section, major crime, intelligence, and border integrity. After transferring to Ontario in 2008, she focused on organized… Read moreRead less
Lina Dabit joined the RCMP in 1994 and started her career in BC working a variety of duties ranging from uniform patrol, drug section, major crime, intelligence, and border integrity. After transferring to Ontario in 2008, she focused on organized crime, national security and established the RCMP interview team in Ontario. She was commissioned in 2017 as commander of the Toronto Air Marshal Unit. Since 2021, she has led the Cybercrime Investigative Team and is building an innovative operational Cyber hub focused on collaboration between federal, international and private sector partnerships.
