State Of Canada’s Cybersecurity Industry

This publication is available online at https://ised-isde.canada.ca/site/aerospace-defence/en.

To obtain a copy of this publication, or to receive it in an alternate format (Braille, large print, etc.), please contact:

Web Services Centre
Innovation, Science and Economic Development Canada
C.D. Howe Building
235 Queen Street
Ottawa, Ontario  K1A 0H5
Canada

Telephone (toll-free in Canada): 1-800-328-6189
Telephone (international): 613-954-5031
TTY (for hearing impaired): 1-866-694-8389
Business hours: 8:30 a.m. to 5:00 p.m. (Eastern Time)
Email: ISED@canada.ca

Permission to Reproduce

Except as otherwise specifically noted, the information in this publication may be reproduced, in part or in whole and by any means, without charge or further permission from the Department of Industry, provided that due diligence is exercised in ensuring the accuracy of the information reproduced; that the Department of Industry is identified as the source institution; and that the reproduction is not represented as an official version of the information reproduced, or as having been made in affiliation with, or with the endorsement of, the Department of Industry.

For permission to reproduce the information in this publication for commercial purposes, please fill out the Application for Crown Copyright Clearance at www.ic.gc.ca/copyright-request or contact the Web Services Centre mentioned above.

© Her Majesty the Queen in Right of Canada, as represented by the Minister of Industry, 2022

Cat. No. Iu62-2E-PDF

ISSN 1913-0171

Aussi offert en français sous le titre Rapport sur l’état de l’industrie canadienne de la cybersécurité.

 
State Of Canada’s Cybersecurity Industry

Report Objective


The objective of this report is to develop relevant, quality, and timely strategic information on Canadian production of cybersecurity goods and services, and to brief policy and industry decision makers.

Canada is the first country from the Organisation for Economic Co-operation and Development (OECD) to conduct an in-depth Government statistical agency survey on cybersecurity industry capabilities from the supplier perspective. This survey, complementary to Statistics Canada’s Canadian Survey of Cyber Security and Cybercrime (CSCSC) (user perspective), is supported by a multi-year collaborative analytics agreement with industry associations, including the Canadian Association of Defence and Security Industries (CADSI), the Council of Canadian Innovators (CCI) and TECHNATION Canada.

This analysis presents a statistical overview of Canadian cybersecurity industry activities in 2020, based on the most recently available data. As such, these findings provide insights into the state of Canada’s cybersecurity industry during the first year of the COVID-19 pandemic.

The next iteration of the biennial survey will measure 2022 industrial activities. Publication of the basic 2022 data by Statistics Canada is scheduled for early 2024.

Project Framework


Survey Refinement & Preparations (May 2020–February 2021):

  • Consultation with industry, subject matter experts, defence and public security organizations, and policy makers on the research framework, and updating the targeted population and questionnaire

Data Development (March 2021–January 2022):

  • Innovation, Science and Economic Development Canada (ISED)-sponsored Statistics Canada biennial survey measuring 2020 activities (first year of COVID-19) with completion of a legal requirement under the Statistics Act
    • Previous data collection efforts measured 2018 with those findings summarised under a previous report
    • The next round of data collection will measure 2022 industrial activities
  • Data validation and firm-level imputation based on administrative and other data

Data Analysis (May 2022–September 2022):

  • Economic impact estimation based on a methodology informed by experts at the OECD and Statistics Canada (See Annex 1)
  • Data analytics and report structure development

Comparative Analysis, 2018–2020


Canada’s cybersecurity industry outperformed the broader Information and Communications Technologies (ICT) sector across industrial indicators between 2018 and 2020Footnote1

Figure 1: Performance of Key Variables, the Canadian Cybersecurity Industry vs. the Broader ICT Sector, (% Change, 2018-2020)

Performance of Key Variables,  the Canadian Cybersecurity Industry vs. the Broader ICT Sector,  % Change, 2018-2020, Long description below.
Text version of Figure 1
Performance of Key Variables, the Canadian Cybersecurity Industry vs. the Broader ICT Sector, (% Change, 2018-2020)
  Cybersecurity Industry ICT Sector
Revenues 30% 12%
Employment 31% 3%
R&D 35% 19%
Exports 10% 2%
 

Economic Impact


Canada’s cybersecurity industry contributed over $3.2 billion in Gross Domestic Product (GDP) and 29,000 jobs across the Canadian economy in 2020

  • Total economic activity supported by the Canadian cybersecurity industry increased by over $860 million in GDP and 6,900 jobs between 2018 and 2020

Figure 2: Economic Impact 2020

Economic Impact 2020, Long description below.
Text version of Figure 2
2020 GDP Economic Impact
Cybersecurity Industry Canadian Suppliers to the Cybersecurity Industry Cybersecurity Industry and Value Chain Consumer Spending by Associated Employees Cumulative Total GDP
 $1.6B   $0.8B   $2.4B   $0.8B   $3.2B 

 

2020 Jobs Economic Impact
Cybersecurity Industry Canadian Suppliers to the Cybersecurity Industry Cybersecurity Industry and Value Chain Consumer Spending by Associated Employees Cumulative Total GDP
 14,100 jobs   7,800 jobs   21,900 jobs   7,500 jobs   29,400 jobs 
 

Size of Firm Footprint


Firms with fewer than 250 employees accounted for 90% of firms and 45% or more of revenues, employees, R&D, and exports

Figure 3: Size of Firm Footprint

Size of Firm Footprint, Long description below.
Text version of Figure 3
Size of Firm Footprint
  Firms Revenues Employment R&D Exports
Fewer than 250 Employees  90% 47% 47% 45% 55%
250-499 Employees  4% 17% 16% 14% 19%
500 or more Employees  6% 36% 37% 41% 26%
Total Enterprises  100% 100% 100% 100% 100%
  • Firms with 250-499 employees accounted for under 20% of revenues, employment, R&D, and exports
  • Firms with 500+ employees accounted for over 35% of revenues, employment, and R&D, and as a group were the most R&D-oriented but least export-oriented

Ownership Type


Over 490 firms earned more than $3.7 billion in cybersecurity revenues, of which close to 85% were Canadian-owned in 2020Footnote2

Figure 4: Ownership Type

Ownership Type, Long description below.
Text version of Figure 4
Ownership Type
  Firms Revenues Employment R&D Exports
 Canadian-Owned  85% 65% 72% 81% 77%
 US-Owned  9% 21% 14% 13% 19%
 Other Foreign-Owned  6% 14% 14% 6% 4%
 Total Enterprises  100% 100% 100% 100% 100%
  • Canadian-owned firms led in terms of revenues, employment, R&D, and exports
    • The operations of foreign-owned firms were also notable and engaged in exports and R&D

Activities By Type


Total revenuesFootnote3 and growth were led by cyber infrastructure solutions for the ongoing protection of networks and data in 2020

  • Beyond cyber infrastructure solutions, remaining industry revenues were fragmented across the provision of various other goods and services

Figure 5: Composition of Industry Revenues and Changes Between 2018 and 2020 by Goods and Services Type ($ Billions)

Composition of Industry Revenues and Changes Between 2018 and 2020 by Goods and Services Type ($ Billions), Long description below.
Text version of Figure 5
Composition of Industry Revenues and Changes Between 2018 and 2020 by Goods and Services Type ($ Billions)
Category Category Total Revenues Change in Revenues, 2020 vs 2018
Infrastructure Solutions, 58.7% $2.19 $0.74
Bundled Solutions, 10.8% $0.40 $0.06
Compliance Audits & Program Development, 7.1% $0.26 $0.03
Encryption, 6.6% $0.25 -$0.01
Penetration Testing & Threat Monitoring, 4.7% $0.17 $0.05
Industrial Control Systems, 4.6% $0.17 $0.01
Forensics & Investigation, 1.9% $0.07 $0.02
Training, 0.7% $0.03 $0.02
Other, 5.0% $0.19 -$0.06
 

Regional Areas of Strength


Each region had specific areas of strength in 2020Footnote4

Figure 6: Canadian Cybersecurity Industry Employment Regional Breakdown with Top Regional Specializations 2020

Canadian Cybersecurity Industry Employment Regional Breakdown with Top Regional Specializations 2020, Long description below.
Text version of Figure 6
Canadian Cybersecurity Industry Employment Regional Breakdown with Top Regional Specializations 2020
Western & Northern Canada 20% Cybersecurity Infrastructure Solutions
Bundled Solutions 
Compliance Audits & Program Development
Encryption
Industrial Control Systems
Ontario 58% Cybersecurity Infrastructure Solutions
Bundled Solutions
Compliance Audits & Program Development
Penetration Testing & Threat Monitoring
Encryption
Quebec 15% Cybersecurity Infrastructure Solutions
Compliance Audits & Program Development
Bundled Solutions 
Penetration Testing & Threat Monitoring
Training
Atlantic Canada 7% Industrial Control Systems
Bundled Solutions
Cybersecurity Infrastructure Solutions
Compliance Audits & Program Development
Training
 

Skills/STEM


Science, Technology, Engineering & Mathematics (STEM)Footnote5 occupations led employment in the cybersecurity industry in 2020

Figure 7: Canadian Cybersecurity Industry Occupation & Gender Breakdown By Employment Type, 2020

Canadian Cybersecurity Industry Occupation & Gender Breakdown By Employment Type, 2020, Long description below.
Text version of Figure 7
Canadian Cybersecurity Industry Occupation & Gender Breakdown By Employment Type, 2020
Occupation Type Females Males Total
STEM 23% 77% 56%
Corporate Functions 40% 60% 42%
Production Workers 24% 76% 2%
All Employees 30% 70% 100%
  • STEM occupations’ share of cybersecurity industry employment was similar to that of the ICT industry and close to six times that of Canada’s overall industrial base
Female Employees' Share of Occupation Types

Occupation Type

Canada's Cybersecurity Industry Canada's ICT SectorFootnote6

Corporate FunctionsFootnote7

40% 44%

STEM

23% 21%
Production Workers 24% 16%

TOTAL

30%

29%

 

Innovation


The cybersecurity industry’s R&D intensityFootnote8 was close to 2.5 times greater than the Canadian ICT industry’s average in 2020

Figure 8: Canadian Cybersecurity Industry R&D Breakdown by Source of Funds and R&D Intensity Cybersecurity vs. ICT Industry (2020)

Canadian Cybersecurity Industry R&D Breakdown by Source of Funds and R&D Intensity Cybersecurity vs. ICT Industry (2020), Long description below.
Text version of Figure 8
Canadian Cybersecurity Industry R&D Breakdown by Source of Funds 2020
Source of Funds Breakdown
Industry Funds for R&D 92%
Government [i.e. Grants] 6%
Other Sources 2%
R&D Intensity Cybersecurity vs. ICT Industry 2020
Cybersecurity Industry ICT Sector
21% 9%
  • Over $347 million of R&D was performed by the industry, led by experimental development in 2020
    • More than 90% was funded by industry—led by funds from parent companies, affiliates, and subsidiaries of the cybersecurity industry R&D performers; followed by the internal funds of the R&D performersFootnote9.

Exports


Over $1.15 billion in exports, with close to 80% accounted for by Canada’s Five Eyes partnersFootnote10

  • Export intensity was close to 2.5 times higher than the ICT industry average in 2020

Figure 9: Cybersecurity Industry Domestic Revenues vs. Exports 2020

Cybersecurity Industry Domestic Revenues vs. Exports 2020, Long description below.
Text version of Figure 9
Cybersecurity Industry Domestic Revenues vs. Exports 2020
Cybersecurity Domestic Revenues 69.00% Cybersecurity Export Revenues 31.00%
Domestic Revenues by Customer Type Export Revenues by Destination
Canadian Federal Government 12.00% United States 72.50%
Other Canadian Customers 88.00% United Kingdom (UK) 5.20%
    Australia 0.60%
    New Zealand 0.20%
    Canada's "Five Eyes" Allies 78.50%
    Europe Other than UK 11.10%
    Asia & Oceania - Other than
Australia & New Zealand
5.00%
    Central America, the Caribbean,
Mexico & South America
3.50%
    Middle East and Africa 1.90%
Cybersecurity Domestic Revenues Total 100.00% Cybersecurity Export Revenues Total 100.00%

Key Findings


In 2020, Canada’s cybersecurity industry:

  • Outperformed the broader ICT sector across industrial indicators since 2018;
  • Was led by Canadian-owned firms, and by firms with fewer than 250 employees;
  • Contributed over 29,000 jobs to the Canadian economy,
    • An increase of close to 6,900 jobs between 2018 and 2020;
  • Was national in scope, with regional specializations; and,
  • Was STEM-oriented and R&D-intensive, with over $1.15 billion of exports.

Annex


Annex 1: Economic Impact Methodology Principles

  • Foundation data is from the latest (2020) Statistics Canada “Canadian Defence, Aerospace, Marine and Cybersecurity Industries Survey” released in 2022
  • ISED economic modelling is based on Statistics Canada’s latest Input-Output multipliers (2018) and closest related specific economic impact multipliers that relate to cybersecurity activities
    • Cybersecurity activity has been linked to the latest (2018) and most relevant specific economic impact multipliers per cybersecurity goods and services category
    • GDP impact is reported cumulatively and on a yearly average basis
    • Job impact is reported on an annual average basis and measured in terms of full-time equivalent employment (FTE)
    • Jobs cannot be additive as they are maintained for an extended period after creation
    • Total economic impact of the cybersecurity industry includes the activity that occurs within the Canadian cybersecurity industry, plus activity among Canadian suppliers to the Canadian cybersecurity industry, as well as consumer spending by associated employees across the Canadian economy
    • Economic impact estimates are reported at the national level and cannot be broken down at the regional level

Data Sources


  1. Comparative Analysis, 2018–2020
    1. Statistics Canada’s Canadian Defence, Aerospace, Marine and Cybersecurity Industries Survey (2018, 2020), 2020 survey released in 2022
    2. ISED’s “2021 Canadian ICT Sector Profile” released in 2022
    3. Related ICT profile data from online and custom Statistics Canada data tables
  2. Economic Impact
    1. See 1(a)
    2. ISED economic modelling based on Statistics Canada’s latest input-output multipliers (2016 and 2018)
    3. Specific economic impact multipliers most relevant to the survey’s scope of cybersecurity goods and services
  3. Size of Firm Footprint
    1. See 1(a)
  4. Ownership Type
    1. See 1(a)
  5. Activities by Type
    1. See 1(a)
  6. Regional Areas of Strength
    1. See 1(a)
  7. Skills/STEM
    1. See 1(a)
    2. Statistics Canada custom tabulations based on the Labour Force Survey (2020), 2022
  8. Innovation
    1. See 1(a)
    2. ISED estimates of cybersecurity industry GDP
    3. See 1(b)
    4. See 1(c)
    5. Statistics Canada Table 36-10-0106-01 for GDP price indexes
  9. Exports
    1. See 1(a)
    2. See 1(b)
    3. See 1(c)