Canada launches Level 1 Cyber Security Certification

The Government of Canada has introduced a new cyber security certification program aimed at strengthening the country’s defence supply chains and protecting sensitive information. The announcement was made by Joël Lightbound, Minister of Government Transformation, Public Works and Procurement, in Gatineau.

The newly launched Level 1 of the Canadian Program for Cyber Security Certification (CPCSC) will become a requirement for selected defence contracts starting in summer 2026. This marks the first phase of a broader plan that will introduce three levels of certification over the coming years. The program is designed to ensure that companies working with the government meet standardized cyber security requirements.

The certification process will require suppliers to confirm that they meet all Level 1 criteria, helping them identify and manage cyber risks more effectively. During the initial rollout, companies will not need certification at the bidding stage but will be required to meet the standards once a contract is awarded. This phased approach is intended to give businesses time to adapt to the new requirements.

The program plays a key role in supporting Canada’s Defence Industrial Strategy by improving the overall cyber security readiness of suppliers. It focuses on protecting sensitive but unclassified information used in defence contracts and reducing vulnerabilities within the supply chain. By setting a baseline standard, the initiative aims to strengthen trust and resilience across the defence sector.

Officials also highlighted that the certification aligns with international standards, including those of key partners such as the United States. This alignment will help Canadian companies remain competitive in global defence markets while ensuring strong protection against increasing cyber threats.

In addition to improving national security, the program is expected to create economic opportunities for Canadian businesses, particularly small and medium-sized enterprises. By enhancing cyber security capabilities, companies will be better positioned to participate in defence contracts and expand their role in the global market.

Overall, the introduction of Level 1 certification represents an important step toward building a secure and resilient defence supply chain. It reflects the government’s commitment to protecting critical information, supporting innovation, and ensuring the long-term stability of Canada’s economy and security systems.