BILL C-26: An Act Respecting Cyber Security | What you need to know

BILL C-26 is An Act respecting cyber security, amending the Telecommunications Act, and making consequential amendments to other Acts was recently introduced in Parliament.

Part 1 amends the Telecommunications Act to add the promotion of the security of the Canadian telecommunications system as an objective of the Canadian telecommunications policy and to authorize the Governor in Council and the Minister of Industry to direct telecommunications service providers to do anything, or refrain from doing anything, that is necessary to secure the Canadian telecommunications system. It also establishes an administrative monetary penalty scheme to promote compliance with orders and regulations made by the Governor in Council and the Minister of Industry to secure the Canadian telecommunications system as well as rules for judicial review of those orders and regulations.

This Part also makes a consequential amendment to the Canada Evidence Act.

Part 2 enacts the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national security or public safety and that are delivered or operated as part of a work, undertaking or business that is within the legislative authority of Parliament. It also, among other things,

Legislative Highlights

Designated operators would be required to, among other things:

(a) authorizes the Governor in Council to designate any service or system as a vital service or vital system;

(b) authorizes the Governor in Council to establish classes of operators in respect of a vital service or vital system;

(c) requires designated operators to, among other things, establish and implement cyber security programs, mitigate supply-chain and third-party risks, report cyber security incidents and comply with cyber security directions;

(d) provides for the exchange of information between relevant parties; and

(e) authorizes the enforcement of the obligations under the Act and imposes consequences for non-compliance.

Acts that would be affected are the Telecommunications Act, Payment Clearing and Settlement Act (PCSA), Canadian Energy Regulator Act and General Nuclear Safety and Control Regulations (GNSCR)

The future of Bill C-26 remains uncertain. The law could be amended during the legislative process, but only time will tell whether any provinces will react similarly and apply these changes throughout their respective regulated sectors

Cyber Security, What is it

Cyber security, also known as computer security or information technology security, is the protection of electronic information from unauthorized access or theft. In other words, it is the practice of protecting your computer networks and user data from malicious attacks.

There are many different types of cyberattacks, but some common ones include viruses, malware, phishing scams, and denial of service attacks.

Cybersecurity is important for everyone, but it is especially critical for businesses.

That's because businesses have more to lose in the event of a cyberattack. Not only do they stand to lose money, but they also risk losing customer trust and damaging their reputation.

There are many different ways to protect your business from cyberattacks. Some common cybersecurity measures include installing and updating security software, creating strong passwords, and backing up data. But perhaps the most important thing you can do is to educate your employees about cybersecurity. After all, they are the ones who use your computer systems every day and are therefore more likely to be the target

Protection Security Investigations (PSI) is a leading security service provider with over 10 years of experience helping Canadian businesses protect assets and as the world grows more connected, so too do the risks associated with doing business online.

At PSI, we understand this, which is why we provide some of the best security solutions available on the market today. From Small Businesses to Enterprise Organizations Protection Security Investigations has a solution that can fit any business’s needs.