CyberSecure Canada is the federal cyber certification program, and its free learning materials are aimed at small and medium organizations. We offer a free readiness check, a short gap review of your controls against the program's control areas, and help preparing for the certification audit if you go ahead. NetFusion Designs is not the certifying body.
Tell us your company and roughly how many users you have. We'll reply to set up a short gap review.
We won't sell your data or send you marketing you didn't ask for.
Innovation, Science and Economic Development Canada (ISED) describes CyberSecure Canada as the name of the federal cyber certification program. Certified businesses can display a certification mark, which ISED describes as official recognition by the federal government and a way for customers, partners and suppliers to see that a business meets a minimum security requirement.
ISED states that it is no longer the program authority. For certifications after March 31, 2023, it directs organizations to the Standards Council of Canada for the latest program information, including recertification. The year shown on the certification mark is its year of expiration, so certification is not a one-time event.
We do not quote fees, timelines or control counts here, because those are set by the program and the certification bodies, not by us. Confirm them with the Standards Council of Canada and your chosen certification body before you plan around them.
Related: IT compliance in Ontario, security questionnaire help, free external vulnerability scan and free Microsoft 365 security check.
Our Compliance ApproachThe readiness check is a short gap review. It tells you where you stand and what preparation would involve. It is not the certification itself.
Certification is decided by an independent certification body, not by NetFusion Designs. Help preparing for the audit, such as closing gaps and producing documentation, is quoted separately if you want it.
ISED published free fillable templates, examples and how-to guides to help organizations prepare for certification. We review your environment against the same areas.
An inventory of your hardware and software, which ISED's introduction template treats as the foundation for the other requirements.
Whether operating systems and applications are patched automatically wherever possible.
How people sign in, and whether multi-factor authentication protects the accounts that matter.
Who can reach what, and whether administrative access is limited to the people who need it.
Whether important data is backed up, encrypted and recoverable when you need it.
Basic perimeter defences, Wi-Fi and remote access, device settings, secure mobility and portable media.
Whether staff are trained to recognize threats, and whether that training is documented.
A written incident response plan and a log management policy, both of which ISED provides templates for.
The readiness check is free. Preparation work after it is optional and quoted before it starts.
Company name, approximate number of users and a contact.
A conversation and a look at your current controls against the program's control areas.
What is in place, what is missing and which documents you still need, usually within a few business days.
If you go ahead, we help close the gaps and prepare documentation. The certification body runs the audit.
We prepare you for the certification audit. We do not certify you, and we will not imply otherwise.
Each control area marked in place, partial or missing.
The policies, inventories and plans you would need, mapped to ISED's templates where they exist.
Which gaps are quick configuration changes and which need a project.
Pointers to the Standards Council of Canada and ISED pages for current program and certification information.
What help with audit preparation would involve, if you want it.
If certification is not the right fit for what your customers are asking, we will tell you.
We help organizations get ready for the certification audit. The certification itself comes from an independent body, and we would rather say that plainly than blur the line.
ISED describes CyberSecure Canada as the name of the federal cyber certification program. Certified organizations can display a certification mark that, according to ISED, shows they meet a minimum security requirement.
No. We do not certify organizations. We offer a free readiness check and help preparing for the audit. Certification is decided by an independent certification body.
ISED states that it is no longer the program authority for CyberSecure Canada, and directs organizations to the Standards Council of Canada for the latest program information, including certification and recertification.
We do not quote fees or timelines, because they are set by the program and the certification bodies, not by us. Please confirm them with the Standards Council of Canada and the certification body you choose.
Yes. ISED published free fillable templates, examples and how-to guides for certification, and points to free eLearning on the Canadian Centre for Cyber Security's Learning Hub, including a course on cyber security for small and medium organizations.
No. ISED notes that the year on the certification mark represents its year of expiration, and that recertification information is available from the Standards Council of Canada.
Yes. The short gap review and the conversation about it are free, with no obligation. Help preparing for the audit is quoted separately, and only if you ask.
Tell us your company and roughly how many users you have, and we'll set up a short gap review. NetFusion Designs is SOC 2 Type 2 audited, with offices in Markham, Toronto, Kitchener, Mississauga, Pickering and Montreal.
%20(1).avif){kind=logo}
%201.avif)
