PRIMARY MARKET
A dated cryptographic inventory of your SCADA, pipeline telemetry, field and mine site networks, with a migration roadmap your board and your regulator can read. No downtime. No rip and replace.
LATEST FOR THIS SECTOR
Oct 10, 2026 Fabric guide: Refreshing a 2010 to 2020 network in the AI era, the order of operations
Jun 16, 2026 Bill C-8 receives Royal Assent: Critical Cyber Systems Protection Act now law
Oct 7, 2026 AV26-1017: SonicWall SMA1000 Remote Access Appliances Carry a Flaw Exploited in the Wild
Oct 2, 2026 AV26-995: Moxa MGate Industrial Protocol Gateways Carry Two New Vulnerabilities
Sep 22, 2026 FIPS 140-2 certificates move to NIST's historical list
Bill C-8 received Royal Assent on June 16, 2026. Energy is one of the four sectors named in the Critical Cyber Systems Protection Act, and the regulations that will designate operators and set timelines are being written now. When a regulator asks what cryptography protects the systems in scope and how long that protection lasts, the operators who already hold an inventory answer in an afternoon. The rest start a project.
The yardstick regulators will have in front of them is already published: the Cyber Centre's ITSM.40.001 sets 2031 for high priority federal systems and 2035 for everything else, and the G7 call to action Canada signed alongside the other G7 members in September 2026 says to begin with a cryptographic inventory. Separately, telemetry and operational records that must stay confidential for years are being captured now to be decrypted later. That is not a future problem for a pipeline or a mine; it is a today problem with a future bill.
Production data is largely public through regulatory filings. The risk is operational: a weak tunnel to a compressor station, a wellhead controller or a mill is a safety and environmental exposure, not only a data one. OT environments cannot take downtime for security upgrades. Acquisitions bring networks whose encryption nobody has mapped. Remote sites run on radio, cellular and satellite links whose key exchange was chosen years ago and never revisited. Most operators have no single list of what encrypts what.
The Fall 2026 Discovery Program, scoped to your operation:
After the Discovery Program, if you want it: hardening the links that matter with quantum-safe keys delivered into the equipment you already run (FortiGate, Juniper, Cisco, Palo Alto Networks and Ciena are examples; the approach is vendor agnostic), and ongoing governance so the inventory stays current as the estate changes. Neither is required to get value from the first step.
Detect first. Nothing is hardened before it is inventoried. Every finding is labelled as customer supplied, discovered, or our judgment, and the report is written for two readers at once: the engineer who has to act on it and the executive who has to sign for it. Fabric Networks designs, supplies, installs and operates in Canada, from Calgary, on a platform validated to FIPS 140-3 with a Fortinet Fabric-Ready key delivery integration. Public demonstrations of that platform by other operators, on optical rings and mixed bearer networks, are recorded in the Library, marked as demonstrations, not as our deliverables.
Pipeline operators, producers and midstream companies, mining and mineral processing operations, power generation and independent producers, and the engineering and security leads accountable for their OT networks. If you run field assets over links you did not design, this page is for you.
Services for this sector
Guidance
Start here
Yes. Discovery is passive: configurations are read and traffic is observed, nothing is reconfigured and no agent runs on a controller. It is designed for SCADA and telemetry that cannot take downtime, and the scoping call sets exactly which segments are observed and how.
Yes, and it is one of the most useful times to do it. An acquisition integration assessment inventories the acquired network's cryptography before it is connected to yours, so unknown tunnels and expired or weak key exchange are found before they become your exposure.
It gives you the thing a Bill C-8 program will ask for first: a dated inventory of the cryptography protecting the systems in scope, with a migration plan against the ITSM.40.001 milestones. Readiness is a program, not a single deliverable, and the report is built to be the foundation of yours.
They can be. Remote links to wellheads, compressor stations and mine sites are often where the oldest key exchange survives, and they are called out specifically in the findings because their consequence is physical.
Twenty minutes, no slides. We ask about your sites, what is driving the interest now and what a useful outcome looks like, and we tell you plainly whether a Discovery Program fits or whether a smaller first step is right.
Questions first? Read the answers buyers ask for most.