CPCSC compliance guides, ITSP.10.171 control breakdowns, AI governance updates, and practical advice for Canadian defence suppliers.
Starting next month, every new DND contract requires CPCSC Level 1 self-assessment at award. Here is what the 13 controls require, how the timeline unfolds, and what to do now.
A practical breakdown of the 17 control families and how they map to security practices you may already have in place.
How Canada's CPCSC and the US CMMC compare — controls, timelines, assessor requirements, and what dual-compliance looks like.
How the EU AI Act and NIST AI Risk Management Framework apply to AI systems used in Canadian defence procurement.
How SHA-256 hashing, KMS signing, and Merkle chains create evidence that assessors and auditors can independently verify.