New Information Technology Security Requirements For Critical Infrastructure Facilities In Alberta

On May 31, 2025, the Alberta Security Management for Critical Infrastructure Regulation (the Regulation) will come into force and is expected to alter existing security requirements for critical resource infrastructure in Alberta. Notably, critical infrastructure facilities identified as such by the Alberta Energy Regulator will be obligated to comply with CSA Z246.1: Security Management for Petroleum and Natural Gas Industry Systems published by the Canadian Standards Association, as may be amended or replaced from time to time (the CSA Standard).

Compliance with the CSA Standard

Previously, security criteria for critical resource infrastructure were established pursuant to the Alberta Counter Terrorism Crisis Management Plan under the Emergency Management Act. Under the Regulation, the CSA Standard will now provide such criteria; and critical facilities must comply with same.