Canadian organizations currently have it "fairly easy" with respect to cyber security regulatory requirements, but should expect that at least some of the changes now unfolding elsewhere will