Practical Guide Using CAN/DGSI 104 to Support CPCSC Level 1 Readiness

As cyber threats intensify and supply chains become more digitally connected, governments are raising the cybersecurity baseline for suppliers, particularly in defence and critical infrastructure sectors. Across North America, frameworks such as Canada’s Canadian Program for Cyber Security Certification (CPCSC), CAN/DGSI 104 for small and medium-sized enterprises (SMEs), and the U.S. Cybersecurity Maturity Model Certification (CMMC) have emerged. These frameworks differ in structure and purpose but share the same objective of ensuring organizations improve cyber hygiene, manage cyber risk, and protect sensitive information.