Transport Canada
Symbol of the Government of Canada

Operational Information Security Group

The "Operational Information" architecture flows carry information that is used to support operation of the transportation system. While not intended for general public distribution, this information has no special sensitivity. Transportation system operation does rely to some degree on the information's integrity and availability.


Security Services

ServiceImportanceService Description
Confidentiality Low The system should prevent unauthorized disclosure of information deemed sensitive.
Integrity Low The system should ensure that information is protected from unauthorized intentional or unintentional modifications.
Availability Low The system should protect critical ITS services in order to prevent degradation or denial of the ITS services to users of the services. Single points of failure should be avoided.
Authentication Low The system should verify the identity of a user and/or other system prior to granting access to a requested resource.
Access Control Low The system should limit access to the resources of a subsystem to only those users and other subsystems that are properly authorized. After authenticating an entity, the system should have the capability to limit system access to information or resources based on that entity’s access privileges. The system should limit software modifications and upgrades to users and other systems that have authorization.

Security Objectives

Objective Classification Class Description
Confidentiality Low Information that is generally available to ITS personnel
Integrity Low Unauthorized or unintended modification of the information could result in minor impact to the operation of the transportation system
Availability Low Loss of the information could result in minor impact to the operation of the transportation system.

Security Threats

Threat Importance Threat Description
Disruption Low A circumstance or event that interrupts or prevents the correct operation of system services and functions.

Architecture flows