Ottawa, ON — The Digital Governance Standards Institute (DGSI) announces the launch of the periodic maintenance review for CAN/DGSI 104: Baseline Cyber Security Controls for Small and Medium Organizations.
This scheduled review will begin December 10, 2025, and will continue for 90 days, concluding on March 10, 2026.
CAN/DGSI 104 provides a foundational set of cyber security controls designed to strengthen the resilience of small and medium organizations. As digital threats continue to evolve, regular maintenance ensures the Standard reflects the latest threat landscape, security best practices, and practical implementation considerations across Canada’s diverse SMO sector.
The maintenance review will examine opportunities for improved clarity, alignment with contemporary cyber risk management frameworks, and evolving guidance related to:
- Organizational leadership and accountability
- Cyber security training and risk assessments
- Foundational Level 1 controls and maturing Level 2 controls
- Baseline technical controls for patching, authentication, secure configuration, and data backup
- Operating-environment-specific guidance, including cloud services, mobility, websites, and log management
Stakeholders, including cybersecurity practitioners, small business leaders, IT service providers, and public-sector representatives, will be consulted throughout the process to ensure the Standard remains practical, actionable, and aligned with Canada’s cyber security priorities.
Consult the current version of the standard and leave your comments via CAN/DGSI 104.
Get in Touch
Darryl Kingston
Executive Director
Digital Governance Standard Institute
darryl.kingston@dgc-cgn.org
About the Digital Governance Standards Institute (DGSI)
The Digital Governance Standards Institute develops digital technology governance standards fit for global use. The Institute works with experts, as well as national and global partners and the public to develop national standards that reduce risk to Canadians and Canadian organizations adopting and using innovative digital technologies in today’s digital economy. The Institute is an independent division of the Digital Governance Council. To learn more about the organization and its initiatives, visit www.dgc-cgn.org or contact info@dgc-cgn.org.