CPCSC · Canadian defence suppliers
Get help preparing for CPCSC.
The Canadian Program for Cyber Security Certification (CPCSC) sets cyber security requirements for suppliers on certain defence contracts. Level 1 is a self-assessment; Level 2 requires an assessment by an accredited certification body. We direct you to firms that can help you prepare — we do not certify anyone.
Describe your need. We call you back.
Which certifications or compliance standards apply to you?
Select all that apply
Level 1 and Level 2 at a glance
| Level | Who validates | What a firm can help with |
|---|---|---|
| Level 1 | Your organization, through a self-assessment | Understanding the requirements that apply to you, documenting your controls, preparing the self-assessment |
| Level 2 | An accredited certification body | Gap analysis, remediation of missing controls, readiness before the certification body's assessment |
The level required is set by the contract. Check the solicitation documents and the official CPCSC guidance from the Government of Canada before you commit to a level.
What we do, and what we don't
- We qualify your request and direct it to compliance firms that match your profile.
- We call you back within 1 business day to confirm your need and your timeline.
- We do not certify, audit or attest anything ourselves. Only an accredited certification body can carry out a Level 2 assessment.