Last Updated: 14 July 2020
There are a few documents and policies you will need to review and agree to prior to being able to register and participate in the Catalyst Cyber Camp (the "Camp") program that are outlined below. By registering in the Camp you are agreeing to abide by the terms and conditions of these documents.
The Camp is open to children who are residents of Brampton Ontario and are at least 13 years of age and no more than 18 years of age as of the date they registered for the Camp. There are a limited number of participants that can participate in the Camp. Registrations will be accepted on a first come basis.
The Camp is a program being delivered by the Rogers Cybersecure Catalyst in partnership with the Escal Institute of Advanced Technologies ("SANS") with support from Ryerson University, Rogers Communications Inc., and the City of Brampton (the "Participating Organizations").
To participate in the Camp you will be using SANS' CyberStart software to undertake the various exercises. As a condition of participation in the Camp you will be asked to enter into SANS' CyberStart End User Licence Agreement and agree to the SANS Privacy and Cookies Policies. These are further described below. You must also agree to received Camp related communications via SANS' selected providers, SendGrid and Campaign Monitor.
The Camp is designed as a Contest. As you work through the puzzles and challenges you will gain points. Individuals with the top scores at the end of the Camp will win prizes. The rules of the contest are set out below. By registering in the Camp you are agreeing to abide by the rules of the Contest.
Last Updated: 14 July 2020
The CyberStart End User Licence Agreement, sometimes called a EULA for short, is a standard document that sets out rules that must be adhered to when using SANS' software. The document is written in as plain English as is possible. In addition to this document you will be asked to agree to the product's privacy, cookies and safeguarding policy.
The CyberStart EULA and policies can be found by clicking here, please take your time to read through and ask your parent or guardian to read through them as well. Please ask your parent or guardian should you not understand anything.
Please note: All licences to the CyberStart Software are issued at SANS' sole discretion. There are a limited amount of licences which are granted on a first come first serve basis and subject to you fulfilling the eligibility criteria.
Once you are successfully registered, SANS will provide you with access to the CyberStart online service which contains training material, challenges and games.
By registering an account, using the site and ultimately joining the Camp you are agreeing to the CyberStart End User Licence Agreement and all associated policies referred to herein. If you break the rules, SANS may suspend your access to the service and in severe cases refer information to the relevant legal authorities.
The CyberStart Software provides educational material and security related puzzles and challenges. As part of these puzzles and challenges you may be required to apply unusual tools or identify patterns in services to uncover logic flaws or issues.
The skills acquired through the use of the CyberStart Software must only be used in an ethical way and always in compliance with all cybercrime laws and regulations throughout the world. It is possible for the materials and tools that make the CyberStart Software to be applied un-ethically or unintentionally, and could result in violation of provincial, federal, or international data protection or computer misuse offences. By using the CyberStart Software you agree that you will not use any of the information provided, tools, or techniques against other individuals or organizations without consent to do so.
When you agree to the End User Licence Agreement you will be provided permission to undertake the activities covered in each of the "briefings" against the defined targets. It is not acceptable to attempt denial of service attacks, or to purposefully attempt to cause damage to the infrastructure or data. It will be deemed a violation of this acceptable use to identify flaws and to purposefully attempt to damage or disrupt other platform users, or their data.
Uncovering security flaws and learning about cybersecurity vulnerabilities will require use of certain tools that can only be used in a context where permission has been given by a target party, as is provided by CyberStart within the puzzle or challenge briefings.
None of SANS, the Rogers Cybersecue Catalyst or any of the Participating Organizations take any responsibility for any wrongdoing by you. In the unlikely event we are advised of any wrongdoing we will immediately terminate your account and report you to the relevant authority. We may also pursue you for any losses or expenses that arise from your wrongdoing. If you are unsure of the appropriateness of the activity you are undertaking at any time, please contact the SANS support.
Last Updated: 14 July 2020
The Contest will be held virtually from 8:00am EST July 15, 2020 until 11:59pm EST September 4, 2020 (the "Contest Period").
The Contest is open to any person that meets the following criteria:
You are not eligible to enter the Contest or be selected as a Winner (as defined below) if any member of your immediate family (parent, sibling) or household (whether related or not), is an individual who works for the Rogers Cybersecure Catalyst, or is assigned to support the Camp at SANS or a Participating Organizations.
The is no purchase necessary to enter the Contest. An eligible individual may enter the Contest by:
(together a "Contest Entry")
There is a limit of one (1) Contest Entry per Entrant.
To be eligible, the work completed by during the Contest (the "Work") must be done by you and must not violate the rights of any third party (for example, it must not defame, infringe or violate publicity or privacy rights of any person, living or deceased, or otherwise infringe upon any person's, entity's, or organization's personal or property rights, including their intellectual property rights).
By entering the Contest, you agree that you will comply with these Contest Rules and with the decisions of the Rogers Cybersecure Catalyst, whose decisions are irrevocable and are legally binding in all matters related to the Contest.
There are six (6) prizes available consisting of a prize pack worth no less than $50 (each a "Prize") to be awarded in this Contest to the first, second and third place Entrants in two categories as follows: (i) Entrants aged 13 to 15 and (ii) Entrants aged 16 to 18.
A Prize must be accepted as awarded and is not transferable, assignable or convertible to cash. No substitutions are permitted except at the Rogers Cybersecure Catalyst's sole option. The Rogers Cybersecure Catalyst reserves the right, in its sole and absolute discretion, to substitute the Prize with an item or items of equal or greater retail value, including, without limitation, but at the Rogers Cybersecure Catalyst’s sole and absolute discretion, a cash award.
The odds of winning the Prize is dependent on the total number of Entrants.
During the Contest Period Entrants will received points for completing security related puzzles and challenges through the CyberStart Game software. Each point earned will count towards the Entrant's total point score. Points are based on the number and difficulty of the challenge completed, as well as whether a hint was used in solving the challenge.
On or about September 4th, a representative of SANS will select the Entrants with the top 3 highest point totals accumulated during the Contest Period for Entrants in each of the two age categories (13 to 15 and 16 to 18) as the potential winners (each an "Eligible Winner"). In the event of a tie between Entrants as to the total points received the representative will randomly select one of the Entrants from the tied Entrants by draw.
A representative of the Rogers Cybersecure Catalyst will make a maximum of three (3) attempts to contact each selected Entrant at the email address they registered with (using the information provided in the Camp registration) within five (5) business days of the September selection date. If the selected Entrant cannot be contacted within five (5) business days of the selection date, or if there is a return of any notification as undeliverable, then that selected Entrant will be disqualified and will forfeit all rights to the Prize and the Rogers Cybersecure Catalyst reserves the right in its sole and absolute discretion, to select as an alternate potential winner the next highest scoring Entrant in the age category (in which case the foregoing provisions of this section will apply to such alternate selected Entrant).
Before an Eligible Winner is declared a winner (after declaration, referred to as a "Winner"), the Eligible Winner must sign and return, within three (3) business days of notification, a declaration of compliance and release of liability prepared by the Rogers Cybersecure Catalyst (the "Release") which, among other things, requires each Entrant or their parent or guardian depending on their age to:
If the Eligible Winner:
then such Eligible Winner will be disqualified (and will forfeit all rights to the applicable Prize) and the Rogers Cybersecure Catalyst reserves the right, in its sole and absolute discretion, to select the Entrant who received the next highest score in the age group to be an Eligible Winner (in which case the foregoing provisions of this section shall apply to such new Eligible Winner).
If for any reason the Contest is not capable of running as planned, including, but not limited to, infection by computer virus, bugs, tampering, unauthorized intervention, fraud, technical failures, or any other causes which corrupt or affect the administration, security, fairness, integrity or proper conduct of the Contest, the Rogers Cybersecure Catalyst reserves the right to cancel, suspend and/or modify the Contest, or any part of it, and disqualify any individual or entity who is responsible for such action. If terminated, the Rogers Cybersecure Catalyst may, in its sole and absolute discretion, determine the winners from among all eligible Contest Entries received up to time of such action using the procedures outlined herein.
No liability or responsibility is assumed by the Rogers Cybersecure Catalyst, SANS or any of the Participating Organizations resulting from the Entrant's participation in or attempt to participate in the Contest or ability or inability to upload or download any information in connection with the Contest. No responsibility or liability is assumed by the Rogers Cybersecure Catalyst, SANS or the Participating Organizations for technical problems or technical malfunction arising in connection with any of the following occurrences which may affect the operation of the Contest: hardware or software errors; faulty computer, cable, satellite, network, electronic, Internet connectivity or other online or network communication problems; errors or limitations of any Internet service providers, servers, hosts or other providers; garbled, jumbled or faulty data transmissions; failure of any online transmissions to be sent or received; lost, late, delayed or intercepted transmissions; inaccessibility of the CyberStart software or Camp website in whole or in part for any reason; traffic congestion on the Internet or the CyberStart software unauthorized human or non-human intervention of the operation of the Contest, including without limitation, unauthorized tampering, hacking, theft, virus, bugs, or worms; or destruction of any aspect of the Contest, or loss, miscount, misdirection, inaccessibility or unavailability of an email account used in connection with the Contest. The Rogers Cybersecure Catalyst, SANS and the Participating Organizations are not responsible for any printing, typographical, technical, computer, network or human error which may occur in the administration of the Contest, the uploading, the processing of Contest Entries, the scoring of the Work, the announcement of the Prizes or in any Contest-related materials. Use of the CyberStart software is at the Entrant's own risk. The Rogers Cybersecure Catalyst, SANS and the Participating Organizations are not responsible for any personal injury or property damage or losses of any kind which may be sustained to any member of the Entrant or any other person resulting from participation or attempt to participate in the Contest. By participating in the Contest, the Entrant agrees:
ANY ATTEMPT BY AN INDIVIDUAL, WHETHER OR NOT AN ENTRANT, TO DELIBERATELY DAMAGE, DESTROY, TAMPER OR VANDALIZE THE CYBERSTART SOFTWARE OR INTERFERE WITH THE OPERATION OF THE CONTEST IS A VIOLATION OF CRIMINAL AND CIVIL LAWS, AND THE CONTEST SPONSOR RESERVES THE RIGHT TO SEEK DAMAGES AND DILIGENTLY PURSUE ALL REMEDIES AGAINST ANY SUCH INDIVIDUAL TO THE FULLEST EXTENT PERMITTED BY LAW.
The Contest is governed in accordance with the domestic laws of the Province of Ontario and the federal laws of Canada applicable therein. The Rogers Cybersecure Catalyst reserves the right, in its sole and absolute discretion, and without prior notice, to adjust any of the dates and/or timeframes stipulated in these Contest Rules, to the extent necessary, for purposes of verifying compliance with these Contest Rules or for any other reason. In the event of any discrepancy or inconsistency between the terms and conditions of these Contest Rules and disclosures or other statements contained in any Contest-related materials, the terms and conditions of these Contest Rules shall prevail, govern and control to the fullest extent permitted by law.
Last Updated: 14 July 2020
SANS is collecting your personal information and data for the purposes of administering, delivering, evaluating, developing, and promoting the program and other Rogers Cybersecure Catalyst programs. In privacy terminology, SANS is acting as both the "data controller" and "data processor" of your personal information and data. This means doing things to your data such as storing and analyzing it or even deleting it.
SANS will disclose your personal information and data to Rogers Cybersecure Catalyst and Ryerson University to help administer, deliver, evaluate, develop, and promote the Camp and Contest, which includes awarding prizes and announcing winners of the Contest. Rogers Cybersecure Catalyst may also use and disclose your personal information and data to promote and develop its other programs.
Finally, SANS, Rogers Cybersecure Catalyst and Ryerson University may also disclose your personal information to Rogers Communications and the City of Brampton for the purposes of awarding prizes, announcing winners, and promoting the program.
SANS, Rogers Cybersecure Catalyst and Ryerson University will ask your permission before it passes your information to any other organization or third party. SANS will comply at all times with the requirements of the General Data Protection Regulations. Rogers Cybersecure Catalyst and Ryerson University will at all times comply with the requirements of the Freedom of Information and Protection of Privacy Act (FIPPA) and Ryerson's privacy policies and procedures and records retention schedule (click on the hyperlinks to learn more).
Your personal information and data are collected from your registration form, from your use of the Catalyst Cyber Camp website, and from details of your progress within the CyberStart Software. Your registration information is needed to enroll you in the program, keep you up to date with things, and to monitor your progress.
In order for SANS to collect and process your personal information and data, it needs to get your consent or permission to use your information on behalf of all the partners involved with the Catalyst Cyber Camp.
Whether you choose to join or leave Catalyst Cyber Camp is entirely up to you. The only effect of asking SANS to delete your information would be that you are no longer able to be a member of the Camp or participate in the Contest.
You must be at least 16 years old to consent to the collection, use, and disclosure of your personal information and data, as you need to understand what is happening to your data and any risks there are with us holding it. You must be at least 13 years of age to join the Camp and participate in the Contest; if you are under the age of 16, you will need a parent or guardian's permission to join the Camp and to participate in the Contest and to consent to the collection, disclosure, and processing of your personal information and data as outlined above. We ask you to give us your date of birth to verify this.
We've tried to make this notice easy to read, but you can always talk to your parent or guardian or contact the Data Protection Officer via firstname.lastname@example.org who will help explain things further and will answer your questions.
We hold information which you provide on registration, and information gathered as you progress through the CyberStart platform including:
Your name, email address, access credentials, subscription preferences, your IP address and cookie data, gender, school, date of birth, parent/guardian name and email, the date of enrolment onto the Camp, details of how you have progressed in the Contest, the scores that you have achieved via the challenges, and how you are using the web sites that make up the Catalyst Cyber Camp program and the CyberStart product.
Your personal information and data are used to monitor progress and to report on the success of the program. Sometimes Rogers Cybersecure Catalyst and Ryerson University may send you promotional and marketing messages relating to their other programs. You will not receive any other marketing messages from other organizations. SANS will also send you essential information on the running of the program through its partner SendGrid, or its partner Campaign Monitor. In order to do this SANS has to pass your details to SendGrid and Campaign Monitor.
SANS also has to report to Rogers Cybersecure Catalyst and Ryerson University on the success of the program. This is on a wide scale and we try not to provide your individual identifying details unless necessary.
The Rogers Cybersecure Catalyst and Ryerson University typically receives general demographic figures such as how many females or males have made progress within CyberStart Game.
SANS also collects data to monitor its site and make sure it stays safe for everyone to use. For example, it may check for misuse of the platform or try to detect if abusive language is being used. This is against Catalyst Cyber Camp rules and the CyberStart product Terms and Policies.
If you change your mind about allowing those involved with Catalyst Cyber Camp to use your information you simply need to send an email to email@example.com. You will then be taken through a couple of quick steps to confirm you want to delete your information and leave the Catalyst Cyber Camp program. You will receive an update when this has been done or in exceptional circumstances if we can't do this.
SANS needs your personal information and data to run the Catalyst Cyber Camp with the Rogers Cybersecure Catalyst, to report on the progress of young people who have joined up, and for the other purposes identified in the first section of this Privacy Notice. The information is used to see how successful the program is and to make sure targets for diversity and inclusivity are being met.
If you don't want your personal information and data being held, you will no longer be able to participate in the Camp and the Contest, and your records will be deleted from the system.
Rogers Cybersecure Catalyst, SANS and the Participating Organizations will have access to your information if they need it. In most cases Rogers Cybersecure Catalyst and Ryerson University will only see general figures such as percentages. The Catalyst Cyber Camp program uses two companies called SendGrid and Campaign Monitor to send you essential email communication. SANS will make sure that all the companies it works with comply with the law and protect your data. SANS does not make automated decisions based on your data however it may use the information to assess your progress on the program.
Your information will be stored and processed within the European area on 'cloud' services. The only time your information may go further than this is where we use your details to conduct a survey as detailed above. SANS will make sure only reputable companies are used for this and will not use your information for external marketing unless it gets your consent. SANS always ensures that there are protections in place to safeguard your data.
As cybersecurity experts SANS is very aware of the risks around data security. SANS carries out regular security assessments to make sure your information is secure. SANS follows all the standard industry practices to make sure it holds your information as securely as possible.
SANS keeps your information for five years or until you ask SANS to delete it if this is sooner and you wish to leave the program. Rogers Cybersecure Catalyst and Ryerson Unviersity retain information for 7 years in accordance with Ryerson University's Records Retention Schedule.
If the circumstances arise where your data needs to be kept for longer, you will be notified and provided with an explanation why. Requests to delete your data will be processed as quickly as possible however there may be some minimal details that need to be kept for audit or safeguarding purposes.
If the information SANS has about you is incorrect, tell SANS and it will be corrected. This will be done as quickly as possible, or at the latest within 30 days.
If you want your information deleted or 'erased' that's not a problem: however, it would mean that you have to leave the Camp as SANS needs the data to provide you access to the program websites, assess your progress, and disclose your information and data to Rogers Cybersecure Catalyst and Ryerson University for the purposes listed in the first section of this Privacy Notice, above.
You have a right to have a copy of the information about you held by any of the Cyber Camp's Participating Organizations or to transfer your information. You can make a request for a copy of your data through the support channel and any data that is available to transfer will be made clear to you as you use the platform. You can action this through the CyberStart software.
If at any time you want further information, or you need help understanding what you can and cannot request, or if you want to make a complaint, SANS' Data Protection Officer can help you with this.
SANS' Data Protection Officer can be contacted via the support channel. Please email firstname.lastname@example.org and ask to be put in contact with the Data Protection Officer.
For questions related to the privacy policies, procedures, and practices of Ryerson University or Rogers Cybersecure Catalyse, contact the university's privacy officer at email@example.com.
Further information and links:
Last Updated: 14 July 2020
The Catalyst Cyber Camp program engages with children between the ages of 13-18 through an online platform. We also engage with younger children for the purposes of promotion of the Catalyst Cyber Camp program for future registrations.
The welfare of our participants is paramount to us and we acknowledge that all children regardless of their age, culture, disability, gender, language, racial origin, religious beliefs and/or sexual identity have the right to be protected from harm and abuse.
The Catalyst Cyber Camp program acknowledges it has a duty of care to safeguard and promote the welfare of children we engage with and we work to ensure safeguarding practices reflect statutory responsibilities, guidance and best practice.
We want to ensure that all participants we engage with have a positive and enjoyable experience of our programs and that they are protected from harm and abuse whilst participating. We are also fully committed to ensuring that the personal data of students that we engage with never falls into the wrong hands.
All suspicions and allegations of abuse and poor practice will be taken seriously and responded to swiftly and appropriately.