Is your company ready for CPCSC certification?
CPCSC Level 1 may be required when you win a Canadian defense contract. Find out in 10 minutes whether you would pass Level 1, free.
Built to save your team time and money: every control is tied to its evidence, so your Level 1 self assessment takes less of your time, and at Level 2 you go into the assessment with your evidence already in order.
What is CPCSC, in plain terms
The Canadian Program for Cyber Security Certification (CPCSC) is the Government of Canada's cyber security certification for companies that supply defense contracts. If you bid on those contracts, it may start to appear as a requirement.
The three levels
- Level 1: annual self-assessment, 13 controls (CCCS ITSP.10.171). May appear in select defense contracts from summer 2026.
- Level 2: 98 controls, assessed every three years by a certification body accredited by the Standards Council of Canada. Gradually added to select defense contracts from April 2027 to March 2028.
- Level 3: 130+ controls, assessed every three years by the Government of Canada.
Most suppliers are not ready and do not know where the gaps are. This free check shows you in minutes.
Want the full picture first? Read our CPCSC compliance guide for defense suppliers: levels, controls, and how Level 1 attestation works.
Get your free CPCSC Level 1 Readiness Checklist
Enter your details to unlock the 13-point self-check instantly and download the full PDF checklist to share with your team.
Want to see the platform first? Preview the scored SOC 2 readiness assessment →