September 21, 2026 – Defence Stories
Estimated read time – 1:56
Fraud can occur anywhere, including within the Department of National Defence (DND) and the Canadian Armed Forces (CAF). It may involve false claims, misuse of resources, procurement irregularities, or other deceptive activities resulting in personal gain. When fraud goes unchecked, it can cause financial losses, damage public trust, and compromise Defence programs.
The Fraud Risk Management Program (FRMP) (accessible only on the National Defence network) works proactively to detect, prevent, and reduce fraud risks across DND/CAF through data analytics, fraud risk assessments, awareness training, and other outreach efforts. However, preventing fraud relies on more than policies, controls, and technology.
Every Defence Team member plays an important role in protecting public resources and maintaining the trust Canadians…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.