In this issue

Fall 2026 · Issue 1

The Network Showdown begins. Four small-to-medium network platforms go on the bench, judged on one question: can they do enterprise work without the enterprise price.

A field guide to the associations. The trade bodies, professional groups, and standards organizations that shape security work in Canada, and what each one is actually for.

The review desk. What we are testing, how we source it, and why the first hardware review starts with the least glamorous part of any deployment: the administrator account.

The dispatch. Short items from the standards, product, and regulation beats.

From the editors

Security Standards Canada exists for one reason: to cover the Canadian security and network trades on merit, with nothing for sale but advertising that is always labelled. No placement is bought. No ranking is traded. When a vendor lends us hardware, we say so, and we send it back.

This first issue sets the tone. The Network Showdown puts real products through real tests and reports what held up. The association guide is a plain map of an industry that too often assumes you already know the acronyms. And the review desk starts where attackers do, at the administrator account, because the most expensive camera network in the country is only as sound as the login that manages it.

Read it here, or print it and keep it. Either way, it is yours, free.

The Editors

---

The Network Showdown begins

Feature · Showdown 2026

The best small-to-medium network platforms rarely get a fair, side-by-side hearing. The enterprise press tests spines and data-centre fabric. The consumer press tests home mesh kits. The gear a Canadian integrator actually installs on a school, a clinic, a warehouse, or a multi-tenant building sits in between, and it is where most security deployments live.

So we are testing it directly. The CCTV and Access Control Network Showdown 2026 judges platforms on the things that decide a real install, not the spec-sheet headline.

What we are testing

Security. VLAN segmentation to isolate cameras and controllers, 802.1X and MAC authentication, ACLs, rogue-device detection, the firmware and CVE track record, and NDAA posture for public-sector work.

Throughput and PoE. Switching capacity, multi-gigabit uplinks, and the real PoE budget. Can it power a floor of IP cameras and access hardware without browning out.

Management. Cloud, local, and the one we care about most: on-prem and fully disconnected management. Can you run and maintain a site with no internet at all.

Reliability and support. Warranty, RMA reality, firmware cadence, and whether you can get it and get it serviced in Canada.

Value. Capability per dollar, because the entire point of the small-to-medium bracket is enterprise work without the enterprise invoice.

The most expensive network in the country is only as sound as the site that still runs when the internet is down.

The opening field

Four platforms start the contest: Alta Labs, Aruba Instant On, Cisco on its small-business tier of Catalyst 1000 and cloud-managed Meraki, and Ubiquiti. The field is not closed. Others can earn a place, and readers can put a contender forward.

Individual system reviews publish through September, one platform at a time, with the bench numbers behind every claim. The winner is named in the October issue and carries the title of Security Standards Canada Network Platform of the Year 2026, earned on the bench and never for sale.

The current field, the full criteria, and the reader vote are at securitystandards.ca/network-showdown-2026.

---

A field guide to the associations

Reference · Industry bodies

Membership in the right body earns credibility, keeps skills current, and opens the standards and advocacy that keep the industry honest. The trouble is that the landscape assumes you already know the acronyms. Here is the plain version, grouped by what each body is for.

Canadian industry and community

CANASA, the Canadian Security Association, is the national trade body for the electronic security industry. It runs advocacy, member training, and the Security Canada trade shows. CFAA, the Canadian Fire Alarm Association, trains and registers the technicians who test and inspect fire alarm systems. Canada Security Collective is a newer, Edmonton-based community focused on careers, mentorship, and workforce development.

Professional practice and consulting

ASIS International is the largest global body for security management, known for the CPP, PSP, PCI, and APP certifications and the GSX conference, with strong Canadian chapters in Toronto, Vancouver, Montreal, Ottawa, and the west. IAPSC is a selective group for independent security consultants who stay free of product sales, and it grants the Certified Security Consultant designation.

Infrastructure, cabling, and the wider industry

BICSI is the global body for structured cabling and ICT infrastructure, known for the RCDD credential, and it runs a dedicated Canadian Region. On the wider industry side, SIA represents security-product companies and sponsors the ISC expos, ESA serves alarm-installing and monitoring companies through its National Training School, and TMA, formerly CSAA, represents professional monitoring companies and issues the Five Diamond designation that several Canadian monitoring centres hold.

The full reference, with founding details, certifications, and links, is at securitystandards.ca/associations.

---

The review desk

On the bench

A review is only worth reading if you know how the product arrived and how it was tested. Our rule is simple. We disclose sourcing on every review, whether the unit was purchased, sent as a sample, or kept for long-term use, and a sample never buys a verdict.

The first hardware review starts where attackers start: the administrator account. Before the cameras, before the access controllers, there is a Windows administrator login that manages all of it, and on a disconnected or on-prem site there is often no cloud identity provider to lean on.

Offline-first administrator security

We are testing hardware security keys for exactly that case: protecting a Windows Server administrator or a local machine account with no dependence on Azure or a live internet connection. That means smart-card style PIV credentials and local credential providers, tested on a site that has been deliberately cut off from the network.

The question is not whether it works with a perfect cloud identity setup. The question is whether it holds up at 2 a.m. on a site with no internet, a locked-out account, and a break-glass procedure that has to actually work.

Coming up

The Showdown system reviews run through September. Alongside them, a portable-lighting review for the field-technician kit is in preparation. As with everything here, the sourcing will be stated plainly and the testing will be real.

---

The dispatch

Short items · Standards, product, regulation

Procurement posture keeps hardening. Public-sector buyers continue to tighten around NDAA and Section 889 concerns. For integrators, the practical effect is unchanged: know the origin of every camera, controller, and switch on a government or critical-infrastructure job before you quote it.

On-prem management is back in demand. Buyers who spent five years moving to cloud dashboards are asking a harder question again: what happens when the internet is down. Platforms that can run and be maintained fully offline are getting a second look, which is exactly why the Showdown tests for it.

Certifications still matter. The credential landscape is crowded, but the shortlist for most Canadian security and network work remains small: CPP and PSP on the management side, RCDD on the infrastructure side, CFAA registration on fire, and the vendor-specific tracks that a given deployment demands.

Colophon

Security Standards Canada is an independent, vendor-neutral resource for the Canadian security and network trades. Coverage is assessed on technical merit and quality. Advertising is always labelled and never affects rankings. Corrections and tips: securitystandards.ca/contact.