Catalyst Cyber Camp

Introduction

Last Updated: 14 July 2020

There are a few documents and policies you will need to review and agree to prior to being able to register and participate in the Catalyst Cyber Camp (the "Camp") program that are outlined below. By registering in the Camp you are agreeing to abide by the terms and conditions of these documents.

The Camp is open to children who are residents of Brampton Ontario and are at least 13 years of age and no more than 18 years of age as of the date they registered for the Camp. There are a limited number of participants that can participate in the Camp. Registrations will be accepted on a first come basis.

The Camp is a program being delivered by the Rogers Cybersecure Catalyst in partnership with the Escal Institute of Advanced Technologies ("SANS") with support from Ryerson University, Rogers Communications Inc., and the City of Brampton (the "Participating Organizations").

To participate in the Camp you will be using SANS' CyberStart software to undertake the various exercises. As a condition of participation in the Camp you will be asked to enter into SANS' CyberStart End User Licence Agreement and agree to the SANS Privacy and Cookies Policies. These are further described below. You must also agree to received Camp related communications via SANS' selected providers, SendGrid and Campaign Monitor.

The Camp is designed as a Contest. As you work through the puzzles and challenges you will gain points. Individuals with the top scores at the end of the Camp will win prizes. The rules of the contest are set out below. By registering in the Camp you are agreeing to abide by the rules of the Contest.

Back to top

CyberStart End User Agreement and Acceptable Use

Last Updated: 14 July 2020

The CyberStart End User Licence Agreement, sometimes called a EULA for short, is a standard document that sets out rules that must be adhered to when using SANS' software. The document is written in as plain English as is possible. In addition to this document you will be asked to agree to the product's privacy, cookies and safeguarding policy.

The CyberStart EULA and policies can be found by clicking here, please take your time to read through and ask your parent or guardian to read through them as well. Please ask your parent or guardian should you not understand anything.

Please note: All licences to the CyberStart Software are issued at SANS' sole discretion. There are a limited amount of licences which are granted on a first come first serve basis and subject to you fulfilling the eligibility criteria.

Once you are successfully registered, SANS will provide you with access to the CyberStart online service which contains training material, challenges and games.

By registering an account, using the site and ultimately joining the Camp you are agreeing to the CyberStart End User Licence Agreement and all associated policies referred to herein. If you break the rules, SANS may suspend your access to the service and in severe cases refer information to the relevant legal authorities.

Acceptable use

The CyberStart Software provides educational material and security related puzzles and challenges. As part of these puzzles and challenges you may be required to apply unusual tools or identify patterns in services to uncover logic flaws or issues.

The skills acquired through the use of the CyberStart Software must only be used in an ethical way and always in compliance with all cybercrime laws and regulations throughout the world. It is possible for the materials and tools that make the CyberStart Software to be applied un-ethically or unintentionally, and could result in violation of provincial, federal, or international data protection or computer misuse offences. By using the CyberStart Software you agree that you will not use any of the information provided, tools, or techniques against other individuals or organizations without consent to do so.

When you agree to the End User Licence Agreement you will be provided permission to undertake the activities covered in each of the "briefings" against the defined targets. It is not acceptable to attempt denial of service attacks, or to purposefully attempt to cause damage to the infrastructure or data. It will be deemed a violation of this acceptable use to identify flaws and to purposefully attempt to damage or disrupt other platform users, or their data.

Uncovering security flaws and learning about cybersecurity vulnerabilities will require use of certain tools that can only be used in a context where permission has been given by a target party, as is provided by CyberStart within the puzzle or challenge briefings.

None of SANS, the Rogers Cybersecue Catalyst or any of the Participating Organizations take any responsibility for any wrongdoing by you. In the unlikely event we are advised of any wrongdoing we will immediately terminate your account and report you to the relevant authority. We may also pursue you for any losses or expenses that arise from your wrongdoing. If you are unsure of the appropriateness of the activity you are undertaking at any time, please contact the SANS support.

Back to top

Contest Rules and Eligibility

Last Updated: 14 July 2020

Duration

The Contest will be held virtually from 8:00am EST July 15, 2020 until 11:59pm EST September 4, 2020 (the "Contest Period").

Eligibility

The Contest is open to any person that meets the following criteria:

  • Is a resident of Brampton, Ontario;
  • Has a confirmed registration for the Camp; and
  • Is at least 13 years of age and no more than 18 years of age as of the date they registered for the Camp.

(an "Entrant")

You are not eligible to enter the Contest or be selected as a Winner (as defined below) if any member of your immediate family (parent, sibling) or household (whether related or not), is an individual who works for the Rogers Cybersecure Catalyst, or is assigned to support the Camp at SANS or a Participating Organizations.

How to enter

The is no purchase necessary to enter the Contest. An eligible individual may enter the Contest by:

  • Registering in the Camp; and
  • Completing puzzles and challenges through the CyberStart Game during the Contest Period.

(together a "Contest Entry")

Contest entry conditions

There is a limit of one (1) Contest Entry per Entrant.

To be eligible, the work completed by during the Contest (the "Work") must be done by you and must not violate the rights of any third party (for example, it must not defame, infringe or violate publicity or privacy rights of any person, living or deceased, or otherwise infringe upon any person's, entity's, or organization's personal or property rights, including their intellectual property rights).

By entering the Contest, you agree that you will comply with these Contest Rules and with the decisions of the Rogers Cybersecure Catalyst, whose decisions are irrevocable and are legally binding in all matters related to the Contest.

Prizes and odds of winning

There are six (6) prizes available consisting of a prize pack worth no less than $50 (each a "Prize") to be awarded in this Contest to the first, second and third place Entrants in two categories as follows: (i) Entrants aged 13 to 15 and (ii) Entrants aged 16 to 18.

A Prize must be accepted as awarded and is not transferable, assignable or convertible to cash. No substitutions are permitted except at the Rogers Cybersecure Catalyst's sole option. The Rogers Cybersecure Catalyst reserves the right, in its sole and absolute discretion, to substitute the Prize with an item or items of equal or greater retail value, including, without limitation, but at the Rogers Cybersecure Catalyst’s sole and absolute discretion, a cash award.

The odds of winning the Prize is dependent on the total number of Entrants.

Winner selection process

During the Contest Period Entrants will received points for completing security related puzzles and challenges through the CyberStart Game software. Each point earned will count towards the Entrant's total point score. Points are based on the number and difficulty of the challenge completed, as well as whether a hint was used in solving the challenge.

On or about September 4th, a representative of SANS will select the Entrants with the top 3 highest point totals accumulated during the Contest Period for Entrants in each of the two age categories (13 to 15 and 16 to 18) as the potential winners (each an "Eligible Winner"). In the event of a tie between Entrants as to the total points received the representative will randomly select one of the Entrants from the tied Entrants by draw.

A representative of the Rogers Cybersecure Catalyst will make a maximum of three (3) attempts to contact each selected Entrant at the email address they registered with (using the information provided in the Camp registration) within five (5) business days of the September selection date. If the selected Entrant cannot be contacted within five (5) business days of the selection date, or if there is a return of any notification as undeliverable, then that selected Entrant will be disqualified and will forfeit all rights to the Prize and the Rogers Cybersecure Catalyst reserves the right in its sole and absolute discretion, to select as an alternate potential winner the next highest scoring Entrant in the age category (in which case the foregoing provisions of this section will apply to such alternate selected Entrant).

Declaration of winners

Before an Eligible Winner is declared a winner (after declaration, referred to as a "Winner"), the Eligible Winner must sign and return, within three (3) business days of notification, a declaration of compliance and release of liability prepared by the Rogers Cybersecure Catalyst (the "Release") which, among other things, requires each Entrant or their parent or guardian depending on their age to:

  • Correctly answer a mathematical skill-testing question without mechanical or other aid;
  • Confirm compliance with these Contest Rules;
  • Agree to release the Rogers Cybersecure Catalyst, Sans and the Participating Organizations from any and all claims, damages, liabilities, costs, and expenses arising from any liability in connection with this Contest, the Entrant's participation therein and/or the awarding and use/misuse of the Prize or any portion thereof;
  • Agree to indemnify and hold harmless the Rogers Cybersecure Catalyst, SANS and Participating Organizations against any and all claims, damages, liabilities, costs, and expenses arising from any claim that the Work of the Eligible Winner infringes a proprietary interest of any third party;
  • Agree to the publication, reproduction and/or other use of the Entrant's name, address (province and city), statements about the Contest and/or photographs or other likeness without further notice or compensation, in any publicity or advertisement carried out by or on behalf of Rogers Cybersecure Catalyst, SANS or the Participating Organizations in any manner whatsoever, including print, broadcast or the internet; and
  • Acknowledge acceptance of the Prize (if awarded).

If the Eligible Winner:

  • Fails to correctly answer the skill-testing question;
  • Fails to return the properly executed Release within the specified time; and/or
  • cannot be a declared a Winner in accordance with these Contest Rules for any reason;

then such Eligible Winner will be disqualified (and will forfeit all rights to the applicable Prize) and the Rogers Cybersecure Catalyst reserves the right, in its sole and absolute discretion, to select the Entrant who received the next highest score in the age group to be an Eligible Winner (in which case the foregoing provisions of this section shall apply to such new Eligible Winner).

Right to suspend/modify/terminate

If for any reason the Contest is not capable of running as planned, including, but not limited to, infection by computer virus, bugs, tampering, unauthorized intervention, fraud, technical failures, or any other causes which corrupt or affect the administration, security, fairness, integrity or proper conduct of the Contest, the Rogers Cybersecure Catalyst reserves the right to cancel, suspend and/or modify the Contest, or any part of it, and disqualify any individual or entity who is responsible for such action. If terminated, the Rogers Cybersecure Catalyst may, in its sole and absolute discretion, determine the winners from among all eligible Contest Entries received up to time of such action using the procedures outlined herein.

Limitations of liability and release

No liability or responsibility is assumed by the Rogers Cybersecure Catalyst, SANS or any of the Participating Organizations resulting from the Entrant's participation in or attempt to participate in the Contest or ability or inability to upload or download any information in connection with the Contest. No responsibility or liability is assumed by the Rogers Cybersecure Catalyst, SANS or the Participating Organizations for technical problems or technical malfunction arising in connection with any of the following occurrences which may affect the operation of the Contest: hardware or software errors; faulty computer, cable, satellite, network, electronic, Internet connectivity or other online or network communication problems; errors or limitations of any Internet service providers, servers, hosts or other providers; garbled, jumbled or faulty data transmissions; failure of any online transmissions to be sent or received; lost, late, delayed or intercepted transmissions; inaccessibility of the CyberStart software or Camp website in whole or in part for any reason; traffic congestion on the Internet or the CyberStart software unauthorized human or non-human intervention of the operation of the Contest, including without limitation, unauthorized tampering, hacking, theft, virus, bugs, or worms; or destruction of any aspect of the Contest, or loss, miscount, misdirection, inaccessibility or unavailability of an email account used in connection with the Contest. The Rogers Cybersecure Catalyst, SANS and the Participating Organizations are not responsible for any printing, typographical, technical, computer, network or human error which may occur in the administration of the Contest, the uploading, the processing of Contest Entries, the scoring of the Work, the announcement of the Prizes or in any Contest-related materials. Use of the CyberStart software is at the Entrant's own risk. The Rogers Cybersecure Catalyst, SANS and the Participating Organizations are not responsible for any personal injury or property damage or losses of any kind which may be sustained to any member of the Entrant or any other person resulting from participation or attempt to participate in the Contest. By participating in the Contest, the Entrant agrees:

  • To release the Rogers Cybersecure Catalyst, SANS and Participating Organizations from any and all claims, damages or liabilities arising from or relating to the Entrant’s participation in the Contest;
  • Under no circumstances will the Entrant be permitted to obtain awards for, and the Entrant hereby waives all rights to claim, punitive, incidental, consequential, or any other damages; and
  • All causes of action arising out of or connected with this Contest, or any prize awarded, shall be resolved individually, without resort to any form of class action.

ANY ATTEMPT BY AN INDIVIDUAL, WHETHER OR NOT AN ENTRANT, TO DELIBERATELY DAMAGE, DESTROY, TAMPER OR VANDALIZE THE CYBERSTART SOFTWARE OR INTERFERE WITH THE OPERATION OF THE CONTEST IS A VIOLATION OF CRIMINAL AND CIVIL LAWS, AND THE CONTEST SPONSOR RESERVES THE RIGHT TO SEEK DAMAGES AND DILIGENTLY PURSUE ALL REMEDIES AGAINST ANY SUCH INDIVIDUAL TO THE FULLEST EXTENT PERMITTED BY LAW.

Privacy and publicity release

The Rogers Cybersecure Catalyst and SANS will collect, use, and disclose the personal information provided upon registration to the Camp and entry into the Contest for the purposes of administering the Contest and Prize fulfillment, in accordance with the privacy policy below, and with SANS's privacy policy, available here.

General

The Contest is governed in accordance with the domestic laws of the Province of Ontario and the federal laws of Canada applicable therein. The Rogers Cybersecure Catalyst reserves the right, in its sole and absolute discretion, and without prior notice, to adjust any of the dates and/or timeframes stipulated in these Contest Rules, to the extent necessary, for purposes of verifying compliance with these Contest Rules or for any other reason. In the event of any discrepancy or inconsistency between the terms and conditions of these Contest Rules and disclosures or other statements contained in any Contest-related materials, the terms and conditions of these Contest Rules shall prevail, govern and control to the fullest extent permitted by law.

Back to top

Privacy Notice

Last Updated: 14 July 2020

Who is collecting and holding my personal information and data, and for what purpose?

SANS is collecting your personal information and data for the purposes of administering, delivering, evaluating, developing, and promoting the program and other Rogers Cybersecure Catalyst programs. In privacy terminology, SANS is acting as both the "data controller" and "data processor" of your personal information and data. This means doing things to your data such as storing and analyzing it or even deleting it.

SANS will disclose your personal information and data to Rogers Cybersecure Catalyst and Ryerson University to help administer, deliver, evaluate, develop, and promote the Camp and Contest, which includes awarding prizes and announcing winners of the Contest. Rogers Cybersecure Catalyst may also use and disclose your personal information and data to promote and develop its other programs.

Finally, SANS, Rogers Cybersecure Catalyst and Ryerson University may also disclose your personal information to Rogers Communications and the City of Brampton for the purposes of awarding prizes, announcing winners, and promoting the program.

SANS, Rogers Cybersecure Catalyst and Ryerson University will ask your permission before it passes your information to any other organization or third party. SANS will comply at all times with the requirements of the General Data Protection Regulations. Rogers Cybersecure Catalyst and Ryerson University will at all times comply with the requirements of the Freedom of Information and Protection of Privacy Act (FIPPA) and Ryerson's privacy policies and procedures and records retention schedule (click on the hyperlinks to learn more).

Consent

Your personal information and data are collected from your registration form, from your use of the Catalyst Cyber Camp website, and from details of your progress within the CyberStart Software. Your registration information is needed to enroll you in the program, keep you up to date with things, and to monitor your progress.

In order for SANS to collect and process your personal information and data, it needs to get your consent or permission to use your information on behalf of all the partners involved with the Catalyst Cyber Camp.

Whether you choose to join or leave Catalyst Cyber Camp is entirely up to you. The only effect of asking SANS to delete your information would be that you are no longer able to be a member of the Camp or participate in the Contest.

You must be at least 16 years old to consent to the collection, use, and disclosure of your personal information and data, as you need to understand what is happening to your data and any risks there are with us holding it. You must be at least 13 years of age to join the Camp and participate in the Contest; if you are under the age of 16, you will need a parent or guardian's permission to join the Camp and to participate in the Contest and to consent to the collection, disclosure, and processing of your personal information and data as outlined above. We ask you to give us your date of birth to verify this.

We've tried to make this notice easy to read, but you can always talk to your parent or guardian or contact the Data Protection Officer via support@catalystcybercamp.com who will help explain things further and will answer your questions.

What personal information and data do you have about me?

We hold information which you provide on registration, and information gathered as you progress through the CyberStart platform including:

Your name, email address, access credentials, subscription preferences, your IP address and cookie data, gender, school, date of birth, parent/guardian name and email, the date of enrolment onto the Camp, details of how you have progressed in the Contest, the scores that you have achieved via the challenges, and how you are using the web sites that make up the Catalyst Cyber Camp program and the CyberStart product.

Your personal information and data are used to monitor progress and to report on the success of the program. Sometimes Rogers Cybersecure Catalyst and Ryerson University may send you promotional and marketing messages relating to their other programs. You will not receive any other marketing messages from other organizations. SANS will also send you essential information on the running of the program through its partner SendGrid, or its partner Campaign Monitor. In order to do this SANS has to pass your details to SendGrid and Campaign Monitor.

SANS also has to report to Rogers Cybersecure Catalyst and Ryerson University on the success of the program. This is on a wide scale and we try not to provide your individual identifying details unless necessary.

The Rogers Cybersecure Catalyst and Ryerson University typically receives general demographic figures such as how many females or males have made progress within CyberStart Game.

SANS also collects data to monitor its site and make sure it stays safe for everyone to use. For example, it may check for misuse of the platform or try to detect if abusive language is being used. This is against Catalyst Cyber Camp rules and the CyberStart product Terms and Policies.

Leaving the program and removing your information

If you change your mind about allowing those involved with Catalyst Cyber Camp to use your information you simply need to send an email to support@catalystcybercamp.com. You will then be taken through a couple of quick steps to confirm you want to delete your information and leave the Catalyst Cyber Camp program. You will receive an update when this has been done or in exceptional circumstances if we can't do this.

Why do you need my information?

SANS needs your personal information and data to run the Catalyst Cyber Camp with the Rogers Cybersecure Catalyst, to report on the progress of young people who have joined up, and for the other purposes identified in the first section of this Privacy Notice. The information is used to see how successful the program is and to make sure targets for diversity and inclusivity are being met.

If you don't want your personal information and data being held, you will no longer be able to participate in the Camp and the Contest, and your records will be deleted from the system.

Who is going to see my information or be given it?

Rogers Cybersecure Catalyst, SANS and the Participating Organizations will have access to your information if they need it. In most cases Rogers Cybersecure Catalyst and Ryerson University will only see general figures such as percentages. The Catalyst Cyber Camp program uses two companies called SendGrid and Campaign Monitor to send you essential email communication. SANS will make sure that all the companies it works with comply with the law and protect your data. SANS does not make automated decisions based on your data however it may use the information to assess your progress on the program.

Where is my data being stored?

Your information will be stored and processed within the European area on 'cloud' services. The only time your information may go further than this is where we use your details to conduct a survey as detailed above. SANS will make sure only reputable companies are used for this and will not use your information for external marketing unless it gets your consent. SANS always ensures that there are protections in place to safeguard your data.

Information that is obtained from Cookies is managed under SANS' Cookie policy. You can find a list of all the companies that SANS works with below.

What security measures are you taking?

As cybersecurity experts SANS is very aware of the risks around data security. SANS carries out regular security assessments to make sure your information is secure. SANS follows all the standard industry practices to make sure it holds your information as securely as possible.

How long with my information be held?

SANS keeps your information for five years or until you ask SANS to delete it if this is sooner and you wish to leave the program. Rogers Cybersecure Catalyst and Ryerson Unviersity retain information for 7 years in accordance with Ryerson University's Records Retention Schedule.

If the circumstances arise where your data needs to be kept for longer, you will be notified and provided with an explanation why. Requests to delete your data will be processed as quickly as possible however there may be some minimal details that need to be kept for audit or safeguarding purposes.

What if the data you hold is wrong or I want to remove it?

If the information SANS has about you is incorrect, tell SANS and it will be corrected. This will be done as quickly as possible, or at the latest within 30 days.

If you want your information deleted or 'erased' that's not a problem: however, it would mean that you have to leave the Camp as SANS needs the data to provide you access to the program websites, assess your progress, and disclose your information and data to Rogers Cybersecure Catalyst and Ryerson University for the purposes listed in the first section of this Privacy Notice, above.

What about my other rights?

You have a right to have a copy of the information about you held by any of the Cyber Camp's Participating Organizations or to transfer your information. You can make a request for a copy of your data through the support channel and any data that is available to transfer will be made clear to you as you use the platform. You can action this through the CyberStart software.

What if I want more information or I want to complain?

If at any time you want further information, or you need help understanding what you can and cannot request, or if you want to make a complaint, SANS' Data Protection Officer can help you with this.

SANS' Data Protection Officer can be contacted via the support channel. Please email support@catalystcybercamp.com and ask to be put in contact with the Data Protection Officer.

For questions related to the privacy policies, procedures, and practices of Ryerson University or Rogers Cybersecure Catalyse, contact the university's privacy officer at fippa@ryerson.ca.

Further information and links:

Back to top

Cookies Policy

Last Updated: 14 July 2020

The Catalyst Cyber Camp program uses cookies as part of delivering our website experience. By registering for the Catalyst Cyber Camp, you agree to the use of Essential Cookies that are a requirement for the CyberStart software to operate.

Additional cookies may be used to optimize the site experience, help us understand where we can improve the Catalyst Cyber Camp program, and for certain marketing activities, but this is undertaken only with your consent when you visit the site. You do not need to accept these optional cookies to participate in the Catalyst Cyber Camp program, and we provide you with an opportunity to opt out of these optional cookies.

SANS' Cookies Policy explains what cookies are, how it uses cookies, how third-parties we may partner with might use cookies on the CyberStart software, your choices regarding cookies and where you can find further information about cookies.

What are cookies?

Cookies are small pieces of text sent to your web browser by a website you visit. A cookie file is stored in your web browser and allows the service or a third-party to recognize you, can make your next visit easier, and can make the website more useful to you.

Cookies can be either 'persistent' or 'session' cookies. Persistent cookies may remain on your hard drive until you erase them or they expire. Session cookies are temporary cookie files, which are erased when you close your browser.

Essential cookies

When you register to use and access the CyberStart software we will ask you to set your cookie preferences. In order to use the CyberStart software there are some cookies that are Essential and you will need to agree to their use if you wish to use this website.

We use these Essential cookies to provide analytics and store your preferences.

We use both session and persistent cookies and we use different types of cookies to provide these Essential cookies. Blocking these cookies will prevent you using our service.

Optional cookies

On your first visit, you will be given the option to manage your cookies and to opt in to non-essential cookies if you wish to do so. Some of the non-essential cookies may be third-party cookies. These are cookies that belong to companies that SANS works with, and allow us to better understand how we are delivering our services to you and how we might improve it.

Non-essential cookies that SANS offers will allow us to monitor the use of the CyberStart software for the Camp and the Contest and make improvements to our site.

Cookies are managed through the cookie banner that will allow you to 'opt in' or 'opt out' of non-essential cookies.

At present the non-essential cookies are limited to selected third parties that SANS works with to provide it with information about the use of its site and to help improve the Catalyst Cyber Camp program. These companies include:

  • Analytics and screen recordings with HotJar of how you interact with this website so we can make improvements to the usability and experience of the CyberStart software.

Some of these third parties will transfer your data out of Canada and Europe; however, SANS will only work with reputable companies who provide sufficient assurances in respect of their security. You do not have to agree to any non-essential cookies and if you do not consent it will have no effect on your ability to participate in the Catalyst Cyber Camp program. If you previously opted in to non-essential cookies, and then later decide to opt-out of those non-essential cookies, you may need to manually remove those third-party cookies using your browser's cookie preferences and clearing settings; due to how third-party cookies work, we are not able to delete or remove these cookies for you from your browser after they have been previously set.

You can delete cookies or instruct your web browser to delete or refuse cookies. To do this you should visit the help pages of your web browser. There are lots of tools and plug-ins available to manage or restrict cookie behaviour but keep in mind that if these tools block CyberStart's Essential cookies, then you may experience problems using our website.

More information about cookies

You can learn more about cookies at the following third-party websites:

Back to top

Safeguarding Statement

Last Updated: 14 July 2020

The Catalyst Cyber Camp program engages with children between the ages of 13-18 through an online platform. We also engage with younger children for the purposes of promotion of the Catalyst Cyber Camp program for future registrations.

The welfare of our participants is paramount to us and we acknowledge that all children regardless of their age, culture, disability, gender, language, racial origin, religious beliefs and/or sexual identity have the right to be protected from harm and abuse.

The Catalyst Cyber Camp program acknowledges it has a duty of care to safeguard and promote the welfare of children we engage with and we work to ensure safeguarding practices reflect statutory responsibilities, guidance and best practice.

We want to ensure that all participants we engage with have a positive and enjoyable experience of our programs and that they are protected from harm and abuse whilst participating. We are also fully committed to ensuring that the personal data of students that we engage with never falls into the wrong hands.

All suspicions and allegations of abuse and poor practice will be taken seriously and responded to swiftly and appropriately.

Back to top