The Minister of National Defense announced May 31st that the Federal Government will develop and implement a Canadian program for cyber security certification that will result in mandatory certification requirements in select federal defense contracts as early as winter 2024.
Public Services and Procurement Canada (PSPC), in partnership with National Defense and the Standards Council of Canada, will lead the Government of Canada’s efforts to establish this new program. Engagement sessions with the defense industry and other key stakeholders are expected to begin in late 2023.
Canada’s defense industry is subject to frequent malicious cyber activities targeting contractors and subcontractors, threatening the protection of unclassified federal information. To protect supply chains critical to Canada’s defense, it is imperative that Canada acts on the matter.
Without certification, Canadian suppliers risk being excluded from future international defense procurement opportunities. The new program will aim to reduce industry burden by pursuing mutual recognition between Canada and the U.S., allowing certified Canadian suppliers to be recognized in both jurisdictions.