Canadian Internet Registry Authority (CIRA) privacy information FAQs

1. What is the Canadian Internet Registry Authority (CIRA) Security Awareness and Training Platform, and why do we need it?2025-02-19T10:27:00-05:00

CIRA is the domain registrar for all Canadian domain name systems (DNS). CIRA is the cyber security awareness and training platform used to provide U of T staff, faculty and librarians with baseline training to improve their knowledge of essential information security topics and threats.

2. What data is collected, and for what purpose?2025-02-19T10:49:41-05:00

The CIRA cyber security awareness and training platform is available to all staff members (appointed and non-appointed), faculty and librarians in participating units that choose to be part of this effort. Units may decide to onboard only a subset of their staff and faculty.

The following publicly available data is collected during the account creation process:

  • First name
  • Last name
  • Email address
  • Division (department)
  • Title

This data is collected to provide a unique account for each user and tailor security training to their needs.

For more details, refer to CIRA’s terms and conditions.

3. Where is the data stored?2025-02-20T09:27:22-05:00

The platform is cloud-based in Microsoft Azure. All data is hosted in a secure environment in Microsoft’s redundant Canadian data centres.

4. How long is the data retained?2025-02-20T09:28:21-05:00

The data will be retained if the user is an account holder or until the end of U of T’s service offering, whichever is longer.

5. How is access to data managed?2025-02-20T09:31:39-05:00

Data related to an individual’s training courses, progress and other reporting metrics will be accessed and shared with the following groups on a need-to-know basis:

  • U of T divisional Information Security leads or equivalent
  • Beauceron staff
  • CIRA staff
  • Microsoft Azure staff

For questions or concerns, contact security.training@utoronto.ca.

Last modified: March 10, 2025

Go to Top