Canadian Internet Registry Authority (CIRA) privacy information FAQs
CIRA is the domain registrar for all Canadian domain name systems (DNS). CIRA is the cyber security awareness and training platform used to provide U of T staff, faculty and librarians with baseline training to improve their knowledge of essential information security topics and threats.
The CIRA cyber security awareness and training platform is available to all staff members (appointed and non-appointed), faculty and librarians in participating units that choose to be part of this effort. Units may decide to onboard only a subset of their staff and faculty.
The following publicly available data is collected during the account creation process:
- First name
- Last name
- Email address
- Division (department)
- Title
This data is collected to provide a unique account for each user and tailor security training to their needs.
For more details, refer to CIRA’s terms and conditions.
The platform is cloud-based in Microsoft Azure. All data is hosted in a secure environment in Microsoft’s redundant Canadian data centres.
The data will be retained if the user is an account holder or until the end of U of T’s service offering, whichever is longer.
Data related to an individual’s training courses, progress and other reporting metrics will be accessed and shared with the following groups on a need-to-know basis:
- U of T divisional Information Security leads or equivalent
- Beauceron staff
- CIRA staff
- Microsoft Azure staff
For questions or concerns, contact security.training@utoronto.ca.
Last modified: March 10, 2025