Strengthening cyber resilience: New accreditation for the Canadian Program for Cyber Security Certification

Third-party Assessment Organizations (3PAOs) can now help safeguard Canada’s defence supply chain by providing third-party cyber security assurances under our new accreditation scheme as part of the Canadian Program for Cyber Security Certification (CPCSC). 

This accreditation, offered through our Inspection Bodies Accreditation Program, supports the Government of Canada’s initiative to protect sensitive government information in defence contracts. By ensuring third-party assessment organizations meet rigorous standards, we provide organizations with trusted, third-party cyber security inspections, demonstrating compliance with procurement requirements and a commitment to cyber resilience.

This important step is part of the first phase of CPCSC implementation and is complimented by the release of ITSP.10.171 standard for Protecting controlled information in non-Government of Canada systems. The new standard will be assessed as part of CPCSC Level 2 assessments performed by third-party assessment organizations accredited by the Standards Council of Canada.

As Canada’s sole accreditation body for this program, we are proud to play a key role in strengthening national security and enhancing cyber resilience. This accreditation aligns with international best practices, helping businesses securely manage government information and expand their access to global defence procurement opportunities.

“Cyber threats are evolving rapidly, and strengthening Canada’s cyber resilience has never been more critical. Our new accreditation scheme ensures that third-party assessment organizations meet the highest standards, helping their clients demonstrate robust cybersecurity practices and eligibility to bid on government contracts.” 

— Elias Rafoul, VP, Accreditation Services

Why accreditation matters

Accredited third-party assessment organizations undergo independent, third-party evaluation to ensure they meet internationally recognized standards. Unlike non-accredited assessments, our accreditation guarantees consistency, impartiality and technical excellence, strengthening trust in cyber security assessments.

With cyber threats on the rise, accreditation helps ensure that only trusted companies handle sensitive government information, boosting Canada’s overall defence security.

Get started

Existing SCC customers: Contact your account manager to discuss how this program supports your needs.

New applicants: Submit a quote request to begin the accreditation process.