// TAG · HANS STUDY POSTS
#compliance
4 posts tagged #compliance.
The Flat Network Problem: Level 1 From Inside a 30-Person Shop
CAD, CNC controllers, office PCs, and the owner's laptop on one flat network behind a home router. Getting from there to a defensible CPCSC Level 1 attestation....
Flow-Down Is Coming: What Your Prime Will Ask Before They Can Bid
CPCSC will not stop at the prime. Allied programs already cascade cyber requirements down every subcontract tier. What lower-tier suppliers need to have ready....
The CCSRA: How DND Will Decide Which Level Your Contract Carries
CPCSC levels are not chosen by suppliers. A cyber security risk assessment on each contract decides. What it weighs, and how to read your own contracts first....
Bill C-8 Is Law. What the CCSPA Means If You Service Critical Infrastructure
Bill C-8 received Royal Assent on 15 June 2026. Part 1 is already in force. The Critical Cyber Systems Protection Act is not, and Schedule 2 is still empty. Her...