// STUDY TRAINING · TR-02 · 1 DAY · COMPLIANCE
CPCSC Bootcamp
One day for suppliers who have been told a contract will require the Canadian Program for Cyber Security Certification and need to know what that means by Friday. The Level 1 requirements in plain language, what evidence an assessor will ask for, which policies you need, and how to scope the system so you certify what you must and nothing more.
What you will be able to do
- Explain the CPCSC levels, who decides which level a contract needs, and what the assessment looks like.
- Map the Level 1 requirements to the controls you already run and the gaps you do not.
- Scope the certification boundary so a 12-person shop is not certifying its lunchroom television.
- Leave with a started evidence checklist and a policy inventory built in the free policy builder.
- Know what to ask an MSP, and what to refuse, when they offer to handle it.
The day
From notice to plan
- 9:00 What CPCSC is and is not
The program, the levels, ITSP.10.171, where it diverges from CMMC, and the timeline as published.
- 10:30 Level 1 requirement by requirement
Each requirement with the evidence an assessor expects and the cheapest honest way to produce it.
- 13:00 Scoping workshop
Participants draw their own boundary: which systems, which people, which cloud services, and what falls outside it.
- 14:30 Policies and evidence
The policy inventory, the free templates, the policy builder, and a working session on your first 3 documents.
- 16:00 Your 90-day plan
Each participant leaves with a dated list of gaps, owners, and the order to close them in.
Who this is for
Owners, operations managers, and the IT contact at Canadian defence suppliers, machine shops, fabricators, and MSPs that support them.
Prerequisites. None. Bring your current IT setup in your head, or the person who holds it.
What is included
- The CPCSC readiness book and the Level 1 evidence checklist
- Access to the policy builder and templates, which are free regardless
- A 90-day plan worksheet completed during the day
- Certificate of completion with contact hours
What this is not
Not a certification assessment and not legal advice. Nothing in the day substitutes for the assessor, and completing it makes no claim about your certification outcome.
Reserve a seat
Reserving costs nothing and commits you to nothing. You get the next cohort dates for this course first, and the invoice only once the dates are confirmed. Groups of 6 or more can ask for private delivery on their own site.