← Back to feed
Threat Actors & CampaignsEmerging1 sourceJul 30, 2026 · 16:05via Tenable Blog

Canada’s Bill C-8 is here: Why the 72-hour reporting rule will redefine critical infrastructure security

Brief

Canada’s new Critical Cyber Systems Protection Act (Bill C-8) introduces a strict 72-hour cyber incident reporting mandate. Find out how Tenable is helping critical national infrastructure operators bridge the IT/OT divide to ensure full compliance.

Key takeaways:

  • Bill C-8 introduces stringent new cyber incident reporting requirements and heavy financial penalties for critical infrastructure operators.
  • Eliminating network blind spots with a hybrid IT/OT discovery approach, including Safe Active Querying for isolated, hard-to-reach process-control systems, enables operators to establish a required security baseline.
  • Predictive Vulnerability Priority Rating (VPR) scoring helps you prioritize and focus limited resources on the critical flaws that actually threaten physical safety and uptime.
Read more on Tenable Blog