OT Cybersecurity, Regulatory Reality, and Industry Collaboration in Canada's Energy Sector

A two-perspective look at securing Canada's energy sector—pairing the regulator's view on cyber, IT, and OT with private-industry experience and the resilience work of the Energy Security Technical Advisory Committee (E-STAC).

A two-perspective look at securing Canada's energy sector—pairing the regulator's view on cyber, IT, and OT with private-industry experience and the resilience work of the Energy Security Technical Advisory Committee (E-STAC).

At BSides Calgary 2026, I had the chance to co-present with Rob Furlong from the Alberta Energy Regulator (AER) on OT cybersecurity, regulatory reality, and industry collaboration in Canada's energy sector.

Rob offered an insider's look at regulation as it applies to cyber, IT, and OT in industry. I followed with a private-industry perspective and the work the Energy Security Technical Advisory Committee (E-STAC) is doing to strengthen the resilience of our energy sector. Together we walked through the amended CSA Z246.1:21 (R2026) and what it means for industry in practice.

The conversation drew a lot of questions on Bill C-8, resiliency, and how organizations can get their own cyber programs involved in the work E-STAC is doing to support energy critical infrastructure. My thanks to BSides Calgary for the platform, and to Rob for co-speaking.

Joint Industry-Government-Military Surge Capacity and Interoperability

A public look at the declassified work of the Energy Security Technical Advisory Committee (E-STAC) on cyber protection for energy critical infrastructure—open to anyone across the energy sector, from electricity and water to gas and LNG.

Open Source, Self Hosted Solutions for Community Organizations