04 / CPCSC READINESS
We help Canadian suppliers prepare for the Programme for Cyber Security Certification with practical scoping, Level 1 readiness, policy support, evidence collection, and self-assessment guidance, while your MSP handles the technical controls.
THE PROBLEM
Defense suppliers can’t treat cyber readiness as an IT side project.
CPCSC readiness affects whether you can bid, whether you can stay in the running, and whether prime contractors see you as a credible supply-chain partner.
The technical controls matter, but so do scoping, policies, evidence, annual attestation, CanadaBuys responses, and a clear answer when someone asks: “Where are you on CPCSC?”
WHAT CPCSC IS
A new cybersecurity certification path for Canadian defense suppliers.
CPCSC is tied to defence contracting and Specified Information. The required level is set by the contract, but many SMBs in the defence supply chain will begin with Level 1 readiness.
01
Level 1
13 controls, annual self-assessment, and the likely starting point for many SMB defence suppliers.
02
Level 2
98 controls, external assessment by an accredited certification body, plus annual affirmation.
03
Level 3
200 controls, Government of Canada assessment, plus annual affirmation for higher-risk requirements.