C-8 Readiness Briefing · 45 minutes · No cost
Bill C-8 is law. When someone says "show me," what will you hand them?
The Critical Cyber Systems Protection Act received Royal Assent in June 2026 and is not yet in force. Once designated, operators will have 90 days to stand up a documented cyber security program and 72 hours to report incidents. This briefing walks through what that will mean for your organization and where the evidence gaps usually sit.
A working session with Telnet's president. Not a product demo, no obligation.
What you leave with
Four things, in 45 minutes
Your ring. Where you sit relative to the Act: designated operator, federal, or regulated by proxy. The three rings of C-8
A frank read on your evidence gap. What you could produce today, and what you couldn't.
The Readiness Checklist, walked through. Ten questions to ask before you're designated.
A suggested next step. Sometimes the next step is nothing.
Delivered by Adrian Norville, President, Telnet Networks.
What we cover
Three parts, plain English, no slides to sit through.
What the Act requires
The five obligations in plain English, and what is settled versus still pending. The Act has passed but is not yet in force, so no obligations apply to most organizations today. We cover what to prepare while you wait.
Where evidence gaps sit
An alert is not a record. The 72-hour clock and the due diligence defence are record-keeping problems before they are detection problems. Host logs and EDR cannot rebuild a timeline across OT devices nobody can put an agent on.
How network evidence helps
What a defensible network record looks like, how it builds on the TAP and SPAN infrastructure you already have, and what you would hand a regulator, the Cyber Centre or your board when they ask to see it.
Who it's for
Whoever owns the C-8 response, and the person who knows the network.
The CISO or security lead
The OT or network lead
The person who was just handed the C-8 file
Ring 1
Designated operators
The six Schedule 1 classes: telecom, interprovincial pipelines and power lines, nuclear, federally regulated transportation, banking, and clearing and settlement.
Ring 2
Federal departments and defence
Where sovereignty and air-gap requirements already apply, and the evidence standard is set by who is asking.
Ring 3
Suppliers and integrators
Regulated by proxy: the vendors who will meet C-8 as a security schedule in a customer contract.
Not sure which ring you're in? That's a fine reason to book. Background: The Second Ring of C-8: what selling to critical infrastructure now requires.
How it works
Step 1
Book a time
Pick a slot below. Four fields, then a calendar invite arrives with a video link and automatic reminders. No back-and-forth.
Step 2
The briefing
45 minutes with Adrian, on video. Bring whoever owns the C-8 file and the person who knows the network; two or three people is ideal.
Step 3
Afterwards
You get the Readiness Checklist and a short written summary. If it makes sense, we can scope a proof of concept on your existing visibility infrastructure.
The Readiness Checklist
10 questions to ask before you're designated
The same ten questions we walk through in the briefing. Three of them:
01
Do you know what “critical cyber systems” means in your environment?
02
Could you produce 72 hours of network record today?
03
Who owns the C-8 program response?
PDF. Name, work email and organization to download.
Your host
Adrian Norville
President, Telnet Networks
Adrian works with Canadian critical infrastructure operators, federal departments and their suppliers on network visibility and the evidence it produces. Telnet Networks is a Burlington, Ontario integrator with more than two decades in network performance, test and measurement, and visibility.
Common questions
Is this a sales pitch?
No. It's a briefing on the Act and your evidence position. If a solution is relevant, we'll say so and leave it there.
Do we need to be designated to book?
No. Most organizations booking today are preparing ahead of designation, or are suppliers expecting C-8 terms in contracts.
Who should attend?
Whoever owns the C-8 response, plus the person who knows the network. Security and OT or network together works best.
Is this legal advice?
No. Telnet provides general information on the Act and its operational implications. Your counsel owns the legal interpretation.
Do you need access to our network first?
No. The briefing works from what you tell us. A proof of concept is a separate, later step.
Webinar · Thursday 3 December 2026 · 1 pm ET · 90 minutes
Show Me: Producing the Evidence C-8 Demands
What you'd hand a regulator, the Cyber Centre and your board, and whether you could produce it today.
Aaron Shull · Dean Parsons · Phil Owens · Adrian Norville, moderator
Free. Replay sent to everyone who registers.
Pick a time
Name, email, company and sector. That's it. You'll get a calendar invite with a video link and reminders.
Prefer a new tab?
Open the booking pageGeneral information on Bill C-8 and the Critical Cyber Systems Protection Act, not legal advice. Last reviewed 9 October 2026. Questions: sales@telnetnetworks.ca or 1 800 561 4019.