CyberSecure Canada Certification in Canada
To be eligible for CyberSecure Canada certification, your organization must implement the controls in CAN/DGSI 104, Baseline Cyber Security Controls for Small and Medium Organizations. Obtain the current standard from the Digital Governance Council.
Get an instant CyberSecure Canada estimate and start your application online
CyberSecure Canada certification process
- 01
Step 1 (start here): Complete the initial Intake form in the Complade certification Portal and receive an instant estimate here. If you need help, email certification.info@complade.com or book a meeting. Also check the training resources here
- 02
Step 2: Complete the certification application. Once you complete step 1 and get an estimate, you will be required to fill in additional information. This information is used to determine the certification scope, audit plan, and contract details.
- 03
Step 3: Review and sign the Mutual Non-Disclosure Agreement and certification terms.
After the agreements are signed, the audit team will be introduced for the Stage 1 audit.
- 04
Step 4: Upload the requested Stage 1 evidence through the Complade portal. If you need help with the certification process, contact support or book a meeting with your case coordinator.
- 05
Step 5: The audit team will share the Stage 1 report and meet with you to discuss readiness for Stage 2.
- 06
Step 6: Stage 2 audit planning: The audit team will work with you to confirm the audit dates and schedule.
- 07
Step 7: Stage 2 audit: conducted remotely or in person to confirm that the applicable requirements and controls operate effectively.
- 08
Step 8: The audit team will share the Stage 2 audit report.
- 09
Step 9: If any gaps are identified, you will be asked to provide a corrective action plan.
- 10
Step 10: The Complade Certification Team will review all reports and make the certification decision.
- 11
Step 11: If all requirements are met, Complade issues the certificate with its defined validity dates and publishes the applicable public certification record.
Complade provides CyberSecure Canada certification services throughout Canada in accordance with CAN/DGSI 104. Audits may be conducted in person, in a hybrid format, or entirely remotely.
CyberSecure Canada certification: common questions
Direct answers from Complade's certification team about scope, cost, timing, audits and accreditation.
What is CyberSecure Canada certification?
CyberSecure Canada certification provides independent confirmation that an organization meets the applicable CAN/DGSI 104 baseline cybersecurity requirements within its defined certification scope.
Who is CyberSecure Canada intended for?
CAN/DGSI 104 is intended for small and medium organizations, which the Digital Governance Council describes as typically having fewer than 500 employees.
Is Complade accredited for CyberSecure Canada certification?
Yes. Complade is accredited by the Standards Council of Canada to provide CyberSecure Canada certification. Its accreditation status can be checked in the SCC directory and IAF CertSearch.
How much does CyberSecure Canada certification cost?
Complade's published starting estimate is CAD $1,300 for an organization with 1–10 people in scope under the listed assumptions. Final pricing is confirmed after the application and audit scope are reviewed.
What happens during a CyberSecure Canada certification audit?
The process includes application and scope review, a Stage 1 evidence review, a Stage 2 implementation audit, corrective action when required, and an independent certification decision.
Can a CyberSecure Canada audit be remote?
Yes. Complade conducts CyberSecure Canada audits remotely, in a hybrid format, or in person across Canada, depending on the scope and audit plan.
Where can I obtain the CyberSecure Canada standard?
The official CAN/DGSI 104 standard is available from the Digital Governance Council. Organizations should use the current edition applicable to their certification.
Does Complade provide CyberSecure Canada implementation consulting?
No. To preserve impartiality, Complade provides certification audits but does not provide implementation consulting or internal audit services.
Need help establishing and maintaining the standard? Start with these free resources:
- 01Copy of the standard :https://dgc-cgn.org/product/can-dgsi-1042021-rev-12024/
- 02Audit Sheet (make a copy and track your implementation) :https://docs.google.com/spreadsheets/d/14JbN6yBnOYZjRiXft1-26KE3cwgc_c6Id8KAwW4z3sg
- 03Official standard training :https://lh-ca.cyber.gc.ca/mod/forum/discuss.php?d=67
- 04Standard training by Complade (This is for the older version, but quite similar) :/training/cybersecure-canada-training
- 05Fillable templates :https://ised-isde.canada.ca/site/cybersecure-canada/en/certification-tools
CyberSecure Canada Audit Process
Policies and procedures