Live panel webinar · Thursday, December 3 · 1:00 PM ET / 10:00 AM PT
Show Me the Record: Turning Cyber Controls into Bill C-8 Evidence
Once the Critical Cyber Systems Protection Act (Bill C-8) comes into force, having cyber controls won't be enough. Designated operators will need to show that those controls work: a documented program within 90 days of designation, and incident reports to the Cyber Centre within 72 hours. Could you produce that record today?
Event details
Thursday, December 3, 2026
Time. 1:00 PM ET (10:00 AM PT)
Format. Live online panel discussion with audience Q&A
Length. 90 minutes
Can't make it live? Register anyway and we'll send you the replay.
The discussion
Three perspectives on one question: what will you hand them?
This is a real discussion, not a series of presentations. The panel brings the legal, operator and network views to the same questions, and they won't always agree. Together, they'll work through:
What the Act requires, and what is still unknown
The obligations designated operators will face, the 90-day and 72-hour clocks, and what is still waiting on designation and regulations.
What operators can realistically show, especially in OT
The gap between having controls and proving they work, in environments where you can't put an agent on every device.
How network data becomes evidence
Turning network traffic into a record you can present to your board, the Cyber Centre and your regulator.
The panel
Legal, operator and network perspectives
Aaron Shull
Principal, Shull Law
Legal
The legal view: what the Act requires and what is still unresolved.
Aaron Shull is principal of Shull Law and a senior fellow at the Centre for International Governance Innovation (CIGI), where he was previously managing director and general counsel. He advises business and government on cybersecurity, incident response, privacy and AI governance, and has testified before House of Commons and Senate committees.
Dean Parsons
CEO, ICS Defense Force · SANS Principal Instructor
Operator
The operator view: what you can realistically show in industrial and OT environments.
Dean Parsons is CEO of ICS Defense Force and a SANS Principal Instructor, with more than 20 years in industrial control systems (ICS) and operational technology (OT) cybersecurity. He advises boards, executives and operations teams on cyber resilience, incident response and defensible architectures across critical infrastructure.
Phil Owens
VP Customer Solutions, Stamus Networks
Network evidence
The network view: how traffic data becomes evidence you can present.
Phil Owens is Vice President, Customer Solutions at Stamus Networks, where he leads systems engineering, support and customer success. He has more than 20 years of experience in IT, networking and cybersecurity as a systems engineer and product manager, with earlier roles at RSA Security, AT&T and IBM, and he served in the United States Air Force.
Adrian Norville
President, Telnet Networks
Moderator
Keeps the discussion focused on what you would actually hand over.
Adrian works with Canadian critical infrastructure operators, federal departments and their suppliers on network visibility and the evidence it produces. Telnet Networks is a Burlington, Ontario integrator with more than two decades in network performance, test and measurement, and visibility.
Register
Reserve your seat
Registration takes under a minute. We'll email your joining details before the session, and the replay afterwards.
Who should attend
Security leaders at organizations likely to be designated under the Act
OT, network and infrastructure leads who would have to produce the record
Risk, compliance and legal teams preparing the C-8 response
Suppliers and integrators expecting C-8 terms in customer contracts
Common questions
Will there be a recording?
Yes. Everyone who registers receives the replay, whether or not they attend live.
Can I send the panel a question in advance?
Yes. Add it to the registration form. We'll put as many as we can to the panel, and you can also ask questions during the session.
Is this a product pitch?
No. One panellist works for a technology vendor and his view is part of the discussion, but the session is about the Act and the evidence it calls for, not a product demo.
Is this legal advice?
No. The panel provides general information on the Act and its operational implications. Your own counsel owns the legal interpretation for your organization.
Is Bill C-8 in force yet?
Not yet. The Critical Cyber Systems Protection Act received Royal Assent in June 2026 and is not yet in force. See our Bill C-8 page for the current status.
Before December
Start on your C-8 readiness now
Book a 45-minute Readiness Briefing with Telnet. We'll walk through what the Act will mean for your organization and where the evidence gaps usually sit.
Or get the C-8 Readiness Checklist: ten questions to ask before you're designated.
General information on Bill C-8 and the Critical Cyber Systems Protection Act, not legal advice. Aaron Shull's remarks are his own views and not those of the Centre for International Governance Innovation (CIGI) or of any client of Shull Law. Last reviewed 22 October 2026. Questions: sales@telnetnetworks.ca or 1 800 561 4019.