The sector's security needs
Why seek independent assurance?
Community Futures organizations provide business services, access to capital and community economic development support. Those activities can involve commercially sensitive business plans and financing records. Applicants, boards and funding partners have different responsibilities, but a shared interest in protecting the information used to deliver these services.
Read the sector sourceChoosing a certification
Baseline cybersecurity requirements
CyberSecure Canada
CyberSecure Canada offers a practical baseline for organizations that need independent assessment of their cybersecurity practices. A certificate can give boards and partners evidence to consider alongside their own oversight. The relevant scope includes the people, systems and outsourced services supporting the activities being certified.
CyberSecure Canada certification processExamples from the Complade Certification Registry
Open each record to check the standard, status and scope. These examples are not endorsements of the organizations' products or services.
In the news
Trenval: protecting client information
On August 22, 2024, Trenval announced that it had achieved CyberSecure Canada certification. In her interview with Complade, Amber Darling, Executive Director at the time, discusses client information in the loan portfolio, the roles of staff and the IT provider, and what happened during the audit.
Watch the interview and read the transcript
Webinars for your sector
CyberSecure Canada for Ontario CFDCs
On March 6, 2024, Complade presented a session for Ontario Community Futures Development Corporations (CFDCs). The presentation explains roles, audit evidence and the certification process for leaders and small teams.
English recording, 32 minutes. Includes chapters, a transcript and notes on historical arrangements.
Watch the webinar
Define your scope
Application review starts with your activities and responsibilities. Be ready to answer these questions:
- Which advisory, lending and administrative activities are included?
- Where are applicant and business records stored and shared?
- Which staff, board members and service providers have access?
Sources and Complade's role
The sources explain sector concerns. Their connection to the certifications discussed is Complade's analysis; these organizations do not endorse Complade or necessarily require these certifications.
Complade provides independent certification audits. We do not provide implementation consulting, readiness consulting or internal audits. Certification concerns conformity with the applicable requirements within a defined scope; it does not guarantee the absence of incidents.
Verify Complade's accreditation · Understand the audit process