Skip to main content
Notice:

In accordance with our obligations under B.C.’s Election Act, this site will not be updated during the provincial election period, except in the case of emerging public health and safety information or topics that are statutory in nature.

Security Management Regulation will come into effect on June 1, 2023, to ensure energy companies have appropriate measures in place to identify and minimize security risks to infrastructure.

DATE ISSUED: May 29, 2023

EFFECTIVE DATE: June 1, 2023

The Security Management Regulation (B.C. Reg. 181/2022) will come into effect on June 1, 2023. The objective of the Security Management Regulation is to ensure energy companies have appropriate measures in place to identify and minimize security risks to infrastructure, which could jeopardize the province’s safe, secure, and reliable energy supply. It applies to all oil and gas activity permit holders under the BC Energy Regulator (BCER).

Key requirements under the Security Management Regulation include:

  • Complying with CSA Z246.1, Security management for petroleum and natural gas industry systems
  • Preparing and maintaining a documented Security Management Program (SMP)
  • Identifying and implementing applicable security measures and procedures, such as:
    • Information security management
    • Cybersecurity measures
    • Physical security measures
  • Preparing and maintaining a security training plan and training records
  • Completing a security incident response evaluation report following an incident

CSA Z246.1 provides a company with flexibility to scale their Security Management Program based on the risk of their assets. Consideration should be given to the scope of their operations, potential security threats and the impacts of a security incident when developing their Security Management Program. Similarly, companies should consider the type, size, location, and criticality of an asset, to evaluate security threat levels and implement appropriate security measures.

Required Submission: Security Management Contact Information

Within 14 days after preparing a Security Management Program, companies must submit the name and contact information of the person responsible for implementation of the program to the BCER:

  • Name
  • Title
  • Phone number(s)
  • Email address

Submit the required information to security.notifications@bc-er.ca.

*Security Management Programs do not need to be submitted to the BCER unless requested.

If you have any questions regarding this Technical Update, please contact:

Kevin Parsonage

Supervisor, Audit & Integrity

BC Energy Regulator

Kevin.Parsonage@bc-er.ca

250-794-5259