Canadian Cyber Security Certification Compliance Support

This compliance brief outlines the Canadian Program for Cyber Security Certification (CPCSC) and its requirements for defence suppliers managing sensitive unclassified government information. The CPCSC, managed by Public Services and Procurement Canada, consists of three certification levels: Level 1 self-assessment, Level 2 third-party assessment, and Level 3 government assessment. The document details how Kiteworks' secure data exchange platform assists Canadian defence suppliers in meeting these certification requirements. It describes features such as access control, identity management, audit logging, and data protection measures that align with the ITSP.10.171 standard, which is based on NIST SP 800-171. The brief also emphasizes the importance of data sovereignty and compliance with Canadian regulations while enabling interoperability with U.S. standards. Kiteworks' platform is positioned to support 79 of the 98 Level 2 controls, facilitating the certification process for defence contractors in Canada.