Complade is an accredited certification body certified by the Standards Council of Canada (SCC) that is part of the International Accreditation Forum (IAF). 

What does it ?

Complade conducts independent, third-party security audits to officially certify organizations against recognized standards like ISO 27001 (global information security management) and CyberSecure Canada (Canada's national cybersecurity standard). 

How does Complade certification works?

Organizations use Complade's online platform to submit application details, track progress, and upload security evidence. To maintain complete impartiality, Complade acts solely as an independent evaluator (similar to a financial auditor, they audit security systems but do not design, consult, or implement them). 

Certification workflow

1. Stage 1 (Documentation Review): The auditor reviews your Information Security Management System (ISMS) policies, scope, and risk assessment to confirm that all required controls are formally documented on paper.

2. Stage 2 (Implementation Audit): The auditor tests how well those policies are followed in real-world operations. This involves interviewing team members, reviewing log samples, and examining live technical evidence to prove controls are active.

3. Certification Decision: An independent technical reviewer examines the audit findings. If all requirements are met (and any non-conformities are resolved), the official accreditation certificate is issued, usually valid for  2 or 3 years.

4. Surveillance & Maintenance: During Years 1 and 2, annual surveillance audits verify that your security program remains active and compliant, leading up to a full Recertification Audit in Year 3.

Need help: Check the free training resources