CPCSC compliance guides, ITSP.10.171 control breakdowns, and practical advice for Canadian defence suppliers.
Starting next month, every new DND contract requires CPCSC Level 1 self-assessment at award. Here is what the 13 controls require, how the timeline unfolds, and what to do now.
A practical breakdown of the 17 control families and how they map to security practices you may already have in place.
How Canada's CPCSC and the US CMMC compare — controls, timelines, assessor requirements, and what dual-compliance looks like.
How Canada's CPCSC and the US CMMC 2.0 relate, and what cross-border defence suppliers need for dual compliance.
How SHA-256 hashing, KMS signing, and Merkle chains create evidence that assessors and auditors can independently verify.