I'd be very interested in learning more about how Canada manages "software engineer." Because whatever is being done certainly doesn't seem to include mandating where regulated professionals must be employed or punishing failures.

Saskatchewan's electronic health records system (eHealth) has had a couple of egregious failures that it shouldn't have taken a "software engineer" to prevent.

Several 911 services became unavailable during an outage that happened to also disrupt point of sale payment systems nationwide.

Both of the relevant companies are telecommunications companies (Telus and Rogers, respectively), where one would expect "software engineering" to be conducted by "software engineers" regardless of regulation.

A quick search for breaches in critical personal information will show that Canada is performing about as well as the US. Which is to say, abysmally.