MUNICIPAL
A cryptographic inventory of the treatment plant, the pumping stations, the distribution network and the metering that bills for it, with a roadmap sized for a municipal budget. No downtime. No rip and replace.
LATEST FOR THIS SECTOR
Oct 10, 2026 Fabric guide: Refreshing a 2010 to 2020 network in the AI era, the order of operations
Oct 2, 2026 AV26-995: Moxa MGate Industrial Protocol Gateways Carry Two New Vulnerabilities
Mar 22, 2026 Canada launches its first National Water Security Strategy
Oct 8, 2026 AV26-1020: Cisco Patches Nexus Switches and Meraki MX Security and SD-WAN Appliances
Canada is writing its first National Water Security Strategy. The March 2026 announcement names aging critical water infrastructure as a challenge and says nothing about the control systems, telemetry and communications that run it. Water and wastewater is one of the ten critical infrastructure sectors in Public Safety Canada's national strategy, and it is the one that is almost entirely municipal. It was left out of the first wave of designated sectors under Bill C-8, which covers finance, telecommunications, energy and transport, so no regulator is asking a water utility today what protects its SCADA. The federal yardstick already exists in ITSM.40.001, and the G7 call to action says to start with an inventory. Utilities that hold one when the second wave comes will answer in an afternoon.
Treatment plants and pumping stations run on SCADA and telemetry that is often older than the staff operating it, connected over VPN tunnels, cellular and radio links whose encryption was chosen years ago and never revisited. Metering and billing systems connect the operational network to the corporate one and to the public. The consequence of a compromised control link is physical: a valve, a dose, a level. Budgets are municipal and capital planning runs in multi year cycles, so the case has to be made in the language of infrastructure renewal, not cyber spend.
The Fall 2026 Discovery Program, scoped to a utility:
After the Discovery Program, if you want it: hardening the links that matter with quantum-safe keys delivered into the firewalls you already run, and ongoing governance as the estate changes.
Detect first. Every finding is labelled customer supplied, discovered or our judgment, and the report is written for the operator who has to act on it and the council or board that has to fund it. Fabric Networks designs, supplies, installs and operates in Canada, from Calgary, on a platform validated to FIPS 140-3 with a Fortinet Fabric-Ready key delivery integration. Fabric intends to make a submission when the Canada Water Agency opens engagement on the National Water Security Strategy; utilities that want to see it or sign it alongside us can say so on the scoping call.
Municipal water and wastewater utilities, regional water commissions, irrigation districts, electric and gas distribution utilities, and the operations and engineering managers accountable for their control networks.
Services for this sector
Guidance
Start here
Because the inventory takes weeks to build and minutes to produce once you have it, and the second wave of designations will ask for it first. The National Water Security Strategy is being written now and says nothing yet about the systems that run water; utilities that can show what protects theirs will be the ones shaping that conversation rather than reacting to it.
Yes. One scope, one report with a section per member, one price. Shared services groups and irrigation districts can do the same.
It can be. The metering and billing path is where the operational network meets the corporate network and the public, and it is often the least reviewed link in a utility. The scoping call decides whether it is in the first program or a later one.
No. Discovery is passive and nothing on the control network is changed. Any hardening you choose later runs under its own scope and change control, on the firewalls you already have.
The report is written for the operator who has to act on it and the council or board that has to fund it, in the language of infrastructure renewal rather than cyber spend. The roadmap is phased to fit a capital plan.
Twenty minutes, no slides. We ask about your sites, what is driving the interest now and what a useful outcome looks like, and we tell you plainly whether a Discovery Program fits or whether a smaller first step is right.
Questions first? Read the answers buyers ask for most.