DGC INITIATIVES

Cyber resilience

Help Canadian organizations strengthen baseline cybersecurity, reuse evidence across requirements and demonstrate readiness to customers, partners and procuring authorities.

CURRENT PHASE

Readiness and verification

Each mission moves from executive dialogue into coordinated work, standards, implementation or verification as the opportunity matures.

MISSION AT A GLANCE

Reduce the gap between cybersecurity requirements, operational controls and credible evidence.

THE PROBLEM

Requirements are multiplying

Organizations face overlapping security expectations, supply-chain pressure and procurement requirements without a clear way to reuse controls and evidence.

DGC'S ROLE

Practical readiness pathway

DGC connects standards, implementation guidance, evidence organization, independent review and verification.

NEXT STEP

Readiness participation

Suppliers, SMEs and implementation partners can engage in readiness, evidence and verification activities.

THE PROBLEM

Cyber resilience depends on controls operating consistently and evidence being ready

Many organizations already have cybersecurity controls, but requirements may be interpreted differently across programs, customers and contracts.

The challenge is often not the absence of every control. It is the need to define parameters, document procedures, apply controls consistently and retain evidence that demonstrates they are working.

  • Duplicated compliance and assessment effort
  • Unclear mapping between standards and procurement requirements
  • Inconsistent evidence and documentation
  • Growing supply-chain and defence-sector readiness expectations
DGC'S ROLE

Make cyber requirements more usable without overstating equivalence

DGC provides implementation aids and independent review while maintaining clear boundaries between readiness support and official program direction.

CONVENE

Connect suppliers and buyers

Bring SMEs, procurement authorities, cyber experts, service providers and regulated sectors together around practical requirements.

COORDINATE

Map controls and evidence

Identify overlaps, evidence reuse and gaps across CAN/DGSI 104 and other relevant cybersecurity requirements.

CODIFY

Maintain practical guidance

Develop standards, crosswalks, workbooks and evidence expectations that organizations can apply.

CONFIRM

Review readiness independently

Provide validation and verification activities that can support internal readiness, due diligence and preparation for procurement.

PARTICIPATING SECTORS

A cross-sector mission

Cyber resilience requires collaboration across organizations that set requirements, implement controls and rely on evidence.

Defence and dual-use suppliers

Companies preparing to demonstrate baseline cyber practices in procurement and supply chains.

Small and medium enterprises

Organizations that need practical, proportionate support to organize controls and evidence.

Public procurement

Departments and agencies responsible for security requirements, contracting and program integrity.

Managed service providers

Implementation partners supporting controls, documentation, evidence and ongoing operations.

Critical and regulated sectors

Organizations in finance, health, energy, telecommunications, transportation and other high-dependency environments.

Assessors and assurance

Cybersecurity professionals, auditors and verification bodies supporting independent review.

PROGRESS

Standards have been connected to practical readiness

DGC has developed guidance and review pathways to help organizations move from requirements to evidence.

GUIDANCE

CAN/DGSI 104 and CPCSC Level 1 guide

The practical guide maps relevant requirements, highlights overlaps and helps organizations identify where controls and evidence may be reused.

PROGRAM

CyberDefence Ready validation and verification

The initiative enables organizations to receive an independent review of cybersecurity practices against CPCSC Level 1 requirements and a formal statement of verification.

IMPLEMENTATION

Evidence-focused readiness

Current work emphasizes defined control parameters, documented procedures, technical enforcement and retained evidence.

123 AuditPrepᵀᴹ

The Digital Governance Council has collaborated with Managed Service Providers (MSPs) across Canada and 123 Cyber in launching 123 AuditPrepᵀᴹ. Our affiliated MSPs are committed to helping their clients build their cyber resilience through the effective implementation of CAN/DGSI 104.

NEXT OPPORTUNITY TO PARTICIPATE

Move from requirements to evidence

Organizations can use the practical guide, map existing controls, organize documented evidence and explore an independent CyberDefence Ready review. Implementation partners can support suppliers and SMEs while maintaining clear boundaries between readiness support and formal CPCSC certification.

WHO SHOULD ENGAGE

Suppliers, SMEs, procurement teams and implementation partners

This mission is most relevant to defence and dual-use companies, regulated sectors, public procuring authorities, managed service providers, cyber professionals and assurance bodies.

Scroll to Top

This website uses cookies to improve your experience. By using our website you agree to our Cookie Policy

This website uses cookies to improve your experience. By using our website you agree to our Cookie Policy