SecuritComply
CPCSC LEVEL 1 · DEFENSE SUPPLIERS

Is your company ready for CPCSC certification?

CPCSC Level 1 may be required when you win a Canadian defense contract. Find out in 10 minutes whether you would pass Level 1, free.

⏳ Level 1 may appear in select defense contracts from summer 2026. Attestation is required at contract award, not at bid.
CPCSC Level 1 readiness check for Canadian defense suppliers

What is CPCSC, in plain terms

The Canadian Program for Cyber Security Certification (CPCSC) is the Government of Canada's cyber security certification for companies that supply defense contracts. If you bid on those contracts, it may start to appear as a requirement.

The three levels

  • Level 1: annual self-assessment, 13 controls (CCCS ITSP.10.171). May appear in select defense contracts from summer 2026.
  • Level 2: 98 controls, assessed every three years by a certification body accredited by the Standards Council of Canada. Gradually added to select defense contracts from April 2027 to March 2028.
  • Level 3: 200 controls, assessed every three years by the Government of Canada.

Most suppliers are not ready and do not know where the gaps are. This free check shows you in minutes.

Want the full picture first? Read our CPCSC compliance guide for defense suppliers: levels, controls, and how Level 1 attestation works.

Get your free CPCSC Level 1 Readiness Checklist

Enter your details to unlock the 13-point self-check instantly and download the full PDF checklist to share with your team.

We send the checklist to this address, so please use one you can receive mail at. We use it only for occasional CPCSC and Canadian compliance updates. No spam. Unsubscribe anytime. · SecuritComply (SecuritAI Technologies Ltd.)

Want to see the platform first? Preview the scored SOC 2 readiness assessment →