NRC waited 3 weeks before notifying abt cyberattack

Why doesn't this surprise me?

One priority of the internal response was communications, to ensure the government had “coordinated and consistent messaging if this does become public.”

The communications strategy included advising senior management on what to expect, what to say to employees, a formal notification of stakeholders and a “robust media relations protocol.”

That strategy was led by the Privy Council Office, the bureaucratic wing of the Prime Minister’s Office, along with Treasury Board, which oversees Shared Services.