Analysis
CPCSC for Defence Suppliers: Levels, Timeline, Preparation
The Canadian Program for Cyber Security Certification (CPCSC) sets cyber security requirements for suppliers handling specified information on Canadian defence contracts. Level 1, an annual self-assessment of 13 controls from ITSP.10.171, has been available since April 1, 2026 and appears in select contracts. Levels 2 and 3 are still under development, with phased introduction signalled from spring 2027.
· 8 min read