NEW MANDATORY RULE · DND SUPPLIERS
Is your company ready for CPCSC certification?
CPCSC certification is now required to win Canadian defence contracts. Find out in 10 minutes whether you would pass Level 1, free.
⏳ Level 1 is mandatory in select DND contracts starting summer 2026. Attestation is required at contract award, with no grace period.
What is CPCSC, in plain terms
The Canadian Program for Cyber Security Certification (CPCSC) is the government's new requirement that defence suppliers prove they meet a baseline of cyber security. If you sell to DND, or to a prime that does, you will need it to stay eligible for contracts.
The three levels
- Level 1: annual self-assessment, 13 controls (CCCS ITSP.10.171). Live now; mandatory in select contracts summer 2026.
- Level 2: external assessment by a Canadian accredited certification body. Mandatory in select contracts spring 2027.
- Level 3: assessment led by National Defence, 200 controls.
Most suppliers are not ready and do not know where the gaps are. This free check shows you in minutes.
Want the full picture first? Read our CPCSC compliance guide for defence contractors: levels, controls, and how certification works.
Get your free CPCSC Level 1 Readiness Checklist
Enter your details to unlock the 13-point self-check instantly and download the full PDF checklist to share with your team.