AI & Security · CPCSC
Canada's cyber security certification for defence suppliers is here. Altanora helps you protect specified information and get ready for Level 1 and Level 2.
The Canadian Program for Cyber Security Certification (CPCSC) verifies that defence suppliers protect sensitive, unclassified government information. It is led by Public Services and Procurement Canada and National Defence. CPCSC is based on the Cyber Centre's ITSP.10.171 standard, which is aligned with NIST SP 800-171, the same foundation as the U.S. CMMC program.
Altanora helps Canadian suppliers keep specified information inside secure Citrix enclaves hosted in Canada, harden access and prepare the evidence assessors will ask for.
Source: Public Services and Procurement Canada, April 2026.
From Level 1 basics to Level 2 readiness.
Keep specified information in a Canadian-hosted Citrix enclave. Learn more.
Readiness assessment against ITSP.10.171 with our compliance partner.
MFA, Zero Trust access and device posture checks for every session.
Logging, session recording and documentation to support assessments.
24/7 monitoring and patching to keep controls effective.
One control set that serves both CPCSC and CMMC where you sell to both countries.
How the three levels compare.
| Level 1 | Level 2 | Level 3 | |
|---|---|---|---|
| Controls | 13 | 98 | About 200 |
| Assessment | Annual self-assessment | Accredited third party, every 3 years | Government-led (DND), every 3 years |
| In contracts | From summer 2026 | Expected spring 2027 | To be announced |
Canada may accept a valid CMMC status case by case; it is not automatic.
Security results published by Citrix and delivered by Altanora.
Canadian public sector
Protected B
Citrix delivered on sovereign Canadian infrastructure, only through Altanora.
Altanora
Global engineering organization
2,000+
developers on Citrix SecurSpaces, with zero lines of code on endpoints.
Aerospace manufacturer
24/7
VIP Priority Support, Citrix subscriptions and professional services.
Altanora client engagement
From Our Clients
“Every interaction with Altanora has consistently exceeded my expectations. Their deep technical expertise, combined with a comprehensive understanding of our business challenges, allows them to deliver practical solutions and reliably meet their commitments.”Frederic St-Jean, Director of Information Technology
2026 Citrix Evangelist Partner of the Year and a Citrix Platinum Partner since 2006, with 70+ certified engineers across North America.
Headquartered in Montreal, with Canadian-hosted infrastructure.
One approach for suppliers selling to DND and the U.S. DoD.
Eligible Citrix security projects may qualify for Citrix Funded Pro Services.
Level 1 launched April 1, 2026, and began appearing in contracts in summer 2026. Level 2 is expected in contracts from spring 2027.
ITSP.10.171 from the Canadian Centre for Cyber Security, which is aligned with NIST SP 800-171 and 800-172.
Canada may accept a valid CMMC status on a case-by-case basis, but recognition is not automatic.
Third-party assessors accredited by the Standards Council of Canada, every three years.
Certification applies to each supplier. Altanora builds and runs environments engineered to support CPCSC controls and helps clients prepare.
Talk to us about Level 1 today and Level 2 readiness.
Talk to a CPCSC Expert