Ottawa, ON — The Digital Governance Standards Institute (DGSI) is pleased to announce the publication of the Second Revision of the First Edition of CAN/DGSI 104: Baseline Cyber Security Controls for Small and Medium Organizations, a National Standard of Canada. The revised Standard incorporates targeted updates that reflect evolving cyber threats, emerging technologies, and current industry best practices while maintaining its focus on practical and achievable cyber security controls for small and medium organizations.
CAN/DGSI 104 establishes a foundational set of cyber security controls intended to help organizations strengthen their cyber resilience and reduce exposure to common threats. The Standard provides a structured approach to implementing baseline cyber security practices while recognizing the varying levels of cyber security maturity across organizations.
This revised edition includes:
- Minor updates to terms and definitions.
- Minor updates to requirements in Sections 4.3.2, 4.4.3, 5.1.2, 5.6.2, and 5.8.2.
- Clarified Level 1 and Level 2 requirements for:
- Automatically patching operating systems and applications.
- Enabling security software.
- Using strong user authentication.
- Establishing basic perimeter defences.
- Securing cloud and outsourced IT services.
- A new informative Annex D identifying relevant cyber security frameworks and standards that organizations may consider when evaluating outsourced service providers.
Among the enhancements are expanded guidance on phishing-resistant authentication, Endpoint Detection and Response (EDR/XDR), vulnerability assessments, AI-enabled social engineering awareness, improved network boundary protection, and updated expectations for cloud service provider assurance. These additions help organizations address today’s cyber security challenges while preserving the Standard’s accessible, risk-based approach for SMEs.
The revision was developed by DGSI Technical Committee 5 on Cyber Security, comprised of more than 240 experts and thought leaders from industry, government, academia, and the public interest community, through an accredited consensus-based standards development process.
The revised Standard is now available via CAN/DGSI 104.
Get in Touch
Darryl Kingston
Executive Director
Digital Governance Standards Institute
darryl.kingston@dgc-cgn.org
About the Digital Governance Standards Institute (DGSI)
The Digital Governance Standards Institute develops digital technology governance standards fit for global use. The Institute works with experts, as well as national and global partners and the public to develop national standards that reduce risk to Canadians and Canadian organizations adopting and using innovative digital technologies in today’s digital economy. The Institute is an independent division of the Digital Governance Council. To learn more about the organization and its initiatives, visit www.dgc-cgn.org or contact info@dgc-cgn.org.