Purpose
The purpose of this study is to support the upcoming 2026 evaluation of the Shared Services Canada (SSC) Cyber Security Program. This evaluation is being led by the Office of Audit and Evaluation (OAE). The objective is to produce a study which includes the lessons learned for developing logic models and identifying performance indicators for programs whose primary objective is to prevent negative outcomes from occurring, such as (but not limited to) public health, security, crime prevention, Disaster Risk Reduction, or others. Furthermore the study will contribute to provide an assessment of how these models define, measure, and evaluate success.
Scope
In addition the study should provide:

• a better understanding of the outcomes that appear on the logic models for “negative outcome” programs. This would include how their outcomes defined and measured. In addition, how are these programs evaluated and assessed for their effectiveness (i.e., progress toward expected outcomes).
• a better understanding on how to measure and evaluate performance that can arise from improved detection practices. “False positives”