Curated postings on post-quantum cryptography and quantum-safe infrastructure. Canadian Centre for Cyber Security and Government of Canada items come first, then NATO and allied guidance, then industry and research. Every entry links to the original source.

Phase 1: Detect
Phase 2: Protect
Phase 3: Comply
Phase 4: Scale
Utilities, municipalities, mines, pipelines, telecoms and defence suppliers running networks installed between 2010 and 2020 are planning refreshes while AI driven attackers probe continuously. The refresh buys evidence or just boxes, and the order of operations decides which: observed inventory, segmentation, rebuilt keys, then equipment, then verification.
refreshing-a-2010-2020-network-ai-era
Level 1 of the CPCSC is thirteen hygiene controls and a self assessment. Level 2, in select defence contracts from spring 2027, is 98 controls assessed by an accredited body, and ITSP.10.171 asks the cryptography question nine ways. A white paper on what to have on paper, and why the inventory also answers ITSM.40.001.
cpcsc-level-2-cryptography-defence-suppliers
The Treasury Board direction on cyber security readiness took effect October 1, 2026, with critical services lists due November 30. This guide maps each requirement the Discovery Program covers, contributes to, or leaves to you, so a federal reader can see the fit without a call.
tbs-cyber-readiness-direction-discovery-program-mapping
The Cyber Centre's new practitioner guidance, ITSP.20.001, sets out the policy, architecture and supply chain threats facing Canada's submarine telecommunications cables, from landing stations and remote management systems to the cable itself, with mitigations for operators.
cyber-centre-itsp-20-001-submarine-cables
Public Safety Canada and the Communications Security Establishment held the first in person meeting of an advisory council that brings critical infrastructure operators, including Bell, Enbridge, CN and Telesat, together with government to strengthen national cyber resilience.
canadian-cyber-defence-collective-advisory-council-sept-2026
CISA and the G7 Cyber Security Working Group (including Canada's Cyber Centre) have jointly told organizations and governments to start migrating to post-quantum cryptography now, not when a quantum computer arrives.
g7-post-quantum-call-to-action
Bill C-8 became law in June 2026. It amends the Telecommunications Act to make security an explicit policy objective and creates the Critical Cyber Systems Protection Act for designated operators in finance, telecommunications, energy and transportation.
bill-c-8-critical-cyber-systems-protection-act-royal-assent
The federal migration roadmap: departmental PQC plans by April 2026, annual progress reporting, high-priority systems migrated by end of 2031, everything else by end of 2035.
cyber-centre-itsm-40-001-pqc-roadmap
Canada's national plan pairs a post-quantum cryptography initiative for near-term protection with a longer-term secure quantum communication network.
national-quantum-strategy-roadmap-pqc
The Cyber Centre's plain-language starting point for Canadian organizations: why harvest now, decrypt later is a present-day risk, and the first steps toward a cryptographic inventory and migration plan.
cyber-centre-itsap-00-017-quantum-threat
Public Safety Canada's 2009 strategy still defines what critical infrastructure is, names the ten sectors, and places primary responsibility for protecting assets on owners and operators. It is the frame Bill C-8 now enforces.
national-strategy-for-critical-infrastructure-2009
NATO's Quantum Technology Roadmap schedules an industry readiness study on quantum-resistant cryptography for Q2 2027, an updated action plan on the quantum threat to cryptography for Q3 2027, and a quantum-resilient communications pilot between Brussels and Mons by Q4 2027.
nato-quantum-technology-roadmap-sept-2026
Under Executive Order 14412, the NSA says all new commercial National Security Systems must support quantum-resistant algorithms from 2027, and legacy systems that cannot be made quantum resilient are to be phased out by 2030.
nsa-pqc-measures-national-security-systems-oct-2026
IrelandQCI demonstrated quantum-secure communication between two Dublin City Council buildings over the council's own fibre network, combining quantum and classical security, in the project's first government use case.
dublin-city-council-quantum-secure-link-sept-2026
Royal Bank of Canada has created a Director of Quantum role, signed multiyear partnerships with the University of Waterloo and the University of Toronto, and says it is moving to post-quantum cryptography and quantum key distribution to protect client data.
rbc-director-of-quantum-pqc-sept-2026
Cloudflare says it will become a public certificate authority and issue post-quantum Merkle Tree Certificates, targeting early 2027 for inclusion in Chrome's new Quantum-resistant Root Store.
cloudflare-public-ca-post-quantum-certificates-2027
Demonstration, September 2026: Babcock and Arqit moved mission data between two sites at DVD 2026 using software based quantum-safe encryption, designed for 4G/5G, satcom, tactical and MANET radios, and signed an MoU. A demonstration by other companies, not a Fabric deliverable.
babcock-arqit-quantum-safe-tactical-communications-demonstration-2026
Proof of concept, July 2026: nLighten and Arqit ran workloads in a hyperscaler's public cloud while keys and controls stayed in a Geneva data centre, using the SKA-Platform, NetworkSecure and Intel TDX. A demonstration by other companies, not a Fabric deliverable. Our take for Canadian buyers.
nlighten-arqit-sovereign-cloud-proof-of-concept-2026
Every Library entry links to its primary source and states the date it was published. The Our take section is written by Fabric Networks Inc. in Calgary and reviewed against that source before it goes live. We name legislation, standards and agencies by their proper titles, we do not invent deadlines or requirements, and we say plainly when something is our interpretation rather than a stated fact. Corrections are made in place and dated.