Will establish mandatory cybersecurity duties for designated operators in federally regulated vital sectors; penalties up to CAD 15 million per day; 90-day programme obligation on designation.