// THE STUDY GUIDE · NEW TITLE · SEPTEMBER 2026
Canada’s defence supply chain now has a cyber security gate on it. CPCSC Level 1 went live in April 2026, the first contract clauses landed that summer, and Level 2 third-party assessments arrive in 2027. This book is the working manual for getting through the gate: what the program is, whether it reaches you, and the order to do things in.
// WHO IT’S FOR
It’s written for the person who found out on a Tuesday. The network admin keeping the business running who just got forwarded a solicitation with a certification clause in it. The office manager handed “compliance” because nobody else put their hand up. The IT lead at a 30-person shop expected to become a certification program on top of everything else. Plain language, sized for evenings and stolen Friday afternoons, built from readiness engagements with real suppliers on both CMMC and CPCSC.
// WHAT’S INSIDE
Twelve chapters in the order you’d actually work: what CPCSC is and why Ottawa built it, the 3 levels, whether the program applies to you, how it compares with CMMC and where the overlap saves you effort, the Level 1 controls and the attestation you’re signing, scoping an enclave that keeps assessment costs sane, running a gap assessment worth trusting, the technical work family by family, documentation that survives an assessor, Level 2 preparation, small shop realities including the MSP conversation, and staying certified after the first attestation. Study Notes from the field throughout, plus a Level 1 readiness checklist and a Canada-US terminology translation table in the appendices.
// FORMATS
Paperback, 8.5 × 11, ISBN 978-1-0680175-1-3. EPUB, ISBN 978-1-0680175-2-0. First edition, September 2026.
Available September 2026.
// THE LIVING COMPANION
A printed book can’t chase a moving program, so this one doesn’t pretend to. The companion pages carry the current program state with a last-verified date: CPCSC, explained and CPCSC vs CMMC.
Hans Study, CISSP · Ontario, Canada · independent network and security consultant. Readiness engagements: CPCSC and CMMC services.