{"id":15,"date":"2026-07-19T21:56:22","date_gmt":"2026-07-20T01:56:22","guid":{"rendered":"https:\/\/nscoesn.ca\/security-domains\/"},"modified":"2026-07-19T22:01:12","modified_gmt":"2026-07-20T02:01:12","slug":"security-domains","status":"publish","type":"page","link":"https:\/\/nscoesn.ca\/en\/security-domains\/","title":{"rendered":"Security domains"},"content":{"rendered":"\n<blockquote class=\"wp-block-quote alignwide is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">There is no such thing as war in cyberspace. There is just war.<\/p>\n<cite>General John E. Hyten, commander, United States Strategic Command, 2017<\/cite><\/blockquote>\n\n\n\n<div class=\"wp-block-group alignwide\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<p class=\"wp-block-paragraph\">The Centre&#8217;s research and advisory work is organised across six security domains. Together they form a structured framework for analysis and advice, and each is recognised within Government of Canada security policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The six divide into two groups. The first three are technological: they address vulnerabilities in electronic systems, signals, and emissions. The latter three are non-technological: they address vulnerabilities in people, information discipline, and the built environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The domains are not adversarial categories. They are the terrain on which adversaries operate, and every threat actor moves across all six at once.<\/p>\n\n<\/div><\/div>\n\n\n<section class=\"section nsd-diagram\" aria-label=\"Threat actors operate across all six security domains\">\n  <div class=\"wrap nsd-diagram-grid\">\n    <div class=\"nsd-agents\">\n      <p class=\"nsd-col-head\">Threat actors<\/p>\n      <ul class=\"nsd-agent-list\">\n                <li class=\"nsd-agent\" tabindex=\"0\"><span class=\"nsd-agent-dot\" aria-hidden=\"true\"><\/span><span class=\"nsd-agent-label\">Foreign intelligence or defence<\/span><\/li>\n                <li class=\"nsd-agent\" tabindex=\"0\"><span class=\"nsd-agent-dot\" aria-hidden=\"true\"><\/span><span class=\"nsd-agent-label\">Foreign state actors<\/span><\/li>\n                <li class=\"nsd-agent\" tabindex=\"0\"><span class=\"nsd-agent-dot\" aria-hidden=\"true\"><\/span><span class=\"nsd-agent-label\">Organised crime<\/span><\/li>\n                <li class=\"nsd-agent\" tabindex=\"0\"><span class=\"nsd-agent-dot\" aria-hidden=\"true\"><\/span><span class=\"nsd-agent-label\">Insider threats<\/span><\/li>\n              <\/ul>\n    <\/div>\n    <div class=\"nsd-bracket\" aria-hidden=\"true\">\n      <svg viewBox=\"0 0 60 260\" preserveAspectRatio=\"none\" focusable=\"false\"><path d=\"M46 6 C22 6 34 122 8 130 C34 138 22 254 46 254\" fill=\"none\" stroke=\"#C9A230\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg>\n    <\/div>\n    <div class=\"nsd-domains\">\n      <p class=\"nsd-col-head\">Security domains<\/p>\n      <ul class=\"nsd-pill-list\">\n                <li class=\"nsd-pill nsd-tech\">\n          <a class=\"nsd-pill-link\" href=\"#itsec\">\n            <span class=\"nsd-abbr\">ITSEC<\/span>\n            <span class=\"nsd-full\">Information technology security<\/span>\n            <span class=\"nsd-one\">Securing information systems, networks, and data.<\/span>\n          <\/a>\n        <\/li>\n                <li class=\"nsd-pill nsd-tech\">\n          <a class=\"nsd-pill-link\" href=\"#comsec\">\n            <span class=\"nsd-abbr\">COMSEC<\/span>\n            <span class=\"nsd-full\">Communications security<\/span>\n            <span class=\"nsd-one\">Protecting communications from interception and exploitation.<\/span>\n          <\/a>\n        <\/li>\n                <li class=\"nsd-pill nsd-tech\">\n          <a class=\"nsd-pill-link\" href=\"#emsec\">\n            <span class=\"nsd-abbr\">EMSEC<\/span>\n            <span class=\"nsd-full\">Emanations security<\/span>\n            <span class=\"nsd-one\">Suppressing compromising electronic emissions.<\/span>\n          <\/a>\n        <\/li>\n                <li class=\"nsd-pill nsd-nontech\">\n          <a class=\"nsd-pill-link\" href=\"#persec\">\n            <span class=\"nsd-abbr\">PERSEC<\/span>\n            <span class=\"nsd-full\">Personnel security<\/span>\n            <span class=\"nsd-one\">Reducing insider threat, foreign influence, and compromise of people.<\/span>\n          <\/a>\n        <\/li>\n                <li class=\"nsd-pill nsd-nontech\">\n          <a class=\"nsd-pill-link\" href=\"#opsec\">\n            <span class=\"nsd-abbr\">OPSEC<\/span>\n            <span class=\"nsd-full\">Operational security<\/span>\n            <span class=\"nsd-one\">Protecting indicators that could reveal sensitive operations.<\/span>\n          <\/a>\n        <\/li>\n                <li class=\"nsd-pill nsd-nontech\">\n          <a class=\"nsd-pill-link\" href=\"#physec\">\n            <span class=\"nsd-abbr\">PHYSEC<\/span>\n            <span class=\"nsd-full\">Physical security<\/span>\n            <span class=\"nsd-one\">Protecting people, facilities, and assets from physical threats.<\/span>\n          <\/a>\n        <\/li>\n              <\/ul>\n    <\/div>\n  <\/div>\n  <p class=\"nsd-diagram-note wrap\">Every threat actor operates across every domain. The domains are the terrain, not the adversary.<\/p>\n<\/section>\n\n\n\n\n<div class=\"wp-block-columns alignwide is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\">Technological domains<\/h4>\n\n\n\n<div class=\"wp-block-group domain-card tech\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 id=\"itsec\" class=\"wp-block-heading\">Information technology security<\/h2>\n\n\n\n<h4 class=\"wp-block-heading nsd-abbr-h\">ITSEC<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Protecting information systems, networks, and data from unauthorised access, disruption, or exploitation.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group domain-card tech\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 id=\"comsec\" class=\"wp-block-heading\">Communications security<\/h2>\n\n\n\n<h4 class=\"wp-block-heading nsd-abbr-h\">COMSEC<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Protecting communications from interception and exploitation, through encryption, key management, and secure transmission.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group domain-card tech\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 id=\"emsec\" class=\"wp-block-heading\">Emanations security<\/h2>\n\n\n\n<h4 class=\"wp-block-heading nsd-abbr-h\">EMSEC<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Suppressing compromising electronic emissions that could be used to reconstruct information, the concern of the TEMPEST standard.<\/p>\n<\/div><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\">Non-technological domains<\/h4>\n\n\n\n<div class=\"wp-block-group domain-card nontech\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 id=\"persec\" class=\"wp-block-heading\">Personnel security<\/h2>\n\n\n\n<h4 class=\"wp-block-heading nsd-abbr-h\">PERSEC<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Reducing the risk that people become a route to insider threat, foreign influence, or compromise.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group domain-card nontech\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 id=\"opsec\" class=\"wp-block-heading\">Operational security<\/h2>\n\n\n\n<h4 class=\"wp-block-heading nsd-abbr-h\">OPSEC<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Protecting the indicators that, in aggregate, could reveal sensitive operations or intentions.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group domain-card nontech\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 id=\"physec\" class=\"wp-block-heading\">Physical security<\/h2>\n\n\n\n<h4 class=\"wp-block-heading nsd-abbr-h\">PHYSEC<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Protecting people, facilities, and assets from physical threats, from unauthorised access to sabotage.<\/p>\n<\/div><\/div>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-group alignwide\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h4 class=\"wp-block-heading\">Policy reference<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">These six domains follow the structure of the Government of Canada&#8217;s Policy on Government Security (Treasury Board of Canada Secretariat, 2019). The Centre&#8217;s outputs align with this framework to stay relevant and interoperable with federal security programs.<\/p>\n\n\n<p class=\"center\" style=\"margin-top:10px\"><a class=\"gglink\" href=\"https:\/\/www.tbs-sct.canada.ca\/pol\/doc-eng.aspx?id=16578\" target=\"_blank\" rel=\"noopener noreferrer\">Policy on Government Security, Treasury Board of Canada Secretariat<\/a><\/p>\n\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>There is no such thing as war in cyberspace. There is just war. General John E. Hyten, commander, United States Strategic Command, 2017 The Centre&#8217;s research and advisory work is organised across six security domains. Together they form a structured framework for analysis and advice, and each is recognised within Government of Canada security policy. [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-15","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/pages\/15","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/comments?post=15"}],"version-history":[{"count":1,"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/pages\/15\/revisions"}],"predecessor-version":[{"id":69,"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/pages\/15\/revisions\/69"}],"wp:attachment":[{"href":"https:\/\/nscoesn.ca\/en\/wp-json\/wp\/v2\/media?parent=15"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}