Frequently Asked Questions (FAQ's)

CPCSC Level 1 is the mandatory foundational tier of the Canadian Program for Cyber Security Certification (CPCSC). Built on 13 baseline controls from the Canadian Centre for Cyber Security’s ITSP.10.171 standard (derived from NIST SP 800-171), Level 1 requires an annual executive-backed self-assessment.Rather than a simple checklist, CPCSC Level 1 acts as a strict procurement gate for Canadian Department of National Defence (DND) and Public Services and Procurement Canada (PSPC) contracts. Implementing these 13 controls—covering multi-factor authentication (MFA), automated patching, malware defense, and incident response—establishes core cyber hygiene and creates a seamless path toward CPCSC Level 2 or U.S. CMMC Level 1 cross-border reciprocity.

For defense contractors, MSPs, and cybersecurity practitioners, CPCSC certification proves mastery of Canada’s defense supply chain security framework (CCCS ITSP.10.171 / NIST SP 800-171).Key professional and organizational benefits include:Unlocks Federal Bidding Eligibility: Ensures full compliance with PSPC and DND solicitations where CPCSC attestation or third-party audit is mandatory.Cross-Border Advantage (CMMC Alignment): Because CPCSC maps directly to U.S. CMMC (Cybersecurity Maturity Model Certification) frameworks, certified teams can seamlessly support prime contractors across both Canadian and U.S. DoD supply chains.Career Advancement: Equips IT and compliance professionals with highly specialized skills in gap remediation, System Security Plan (SSP) creation, and defense audit readiness.