Call us now:
Canada has passed its latest cybersecurity Bill, Bill C-8, through its House of Commons and Senate. The Bill now moves forward to Royal Assent.
The Bill is in 2 parts. Part 1 amends the Telecommunications Act to add the promotion of the security of the Canadian telecommunications system. Directing telecommunications service providers to do anything, or refrain from doing anything, that is necessary to secure the Canadian telecommunications system. Part 2, enacts the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national security or public safety.
Part 2 affects a range of Critical systems or service providers that include.
Telecommunications services, Interprovincial or international pipeline and power line systems, Nuclear energy systems, Transportation systems that are within the legislative authority of Parliament, Banking systems, and Clearing and settlement systems. Requiring organisations to implement a cybersecurity program for the management of cyber risks, protect critical assets, and detect cyber incidents within 90 days of the publication of the bill.
The penalties for non-compliance are more severe than NIS 2. Individuals can face fines of up to $500,000 as an administrative violation and 5 years in prison, and organisations face fines of up to $15 million for non-compliance.
Liz Sandwith CFIIA, you will be pleased to note that the Bill specifies the need for an internal audit following recognised guidance as defined by the International Professional Practices Framework of The Institute of Internal Auditors
Aegis Labs
House of Commons of Canada Chambre des communes du Canada Senate of Canada | Sénat du Canada
#cyberregulation #cybersecurity
https://lnkd.in/eZcYheiH
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7476686905443651584