← Back to Feed
Canada’s Bill C-8 is here: Why the 72-hour reporting rule will redefine critical infrastructure security
July 30, 2026 · Tenable Blog · Severity: CRITICAL
Canada's Bill C-8 (Critical Cyber Systems Protection Act) imposes a 72-hour cyber incident reporting mandate for critical infrastructure operators in sectors like telecommunications, energy, and banking. The article discusses how Tenable helps bridge the IT/OT divide through hybrid discovery and vulnerability prioritization to meet compliance requirements.
Key Takeaways
- Bill C-8 mandates strict 72-hour cyber incident reporting for critical infrastructure operators.
- Hybrid IT/OT discovery and safe active querying eliminate network blind spots for compliance.
- Predictive VPR scoring prioritizes critical vulnerabilities threatening physical safety and uptime.