Cybersecurity Certification Framework for Defense Contractors in the Works

Canada and the U.S. plan to work together to create a cybersecurity certification framework for defense contractors, as instances of hacking continue to rise. 

The war in Ukraine and associated instances of cyberattacks were also cited as a motivation to create specific legislation to address it. 

The collaboration was announced by defense minister Anita Anand at the Canadian Association of Defence and Security Industries, an annual defense trade show in Ottawa. The Standards Council of Canada, National Defense and the Public Services and Procurement Canada will also help establish this new program, with initial engagement sessions set to begin later this year.

Under the proposed legislation, software and hardware providers will have to meet new cybersecurity requirements if they want to sell their products in the U.S. and Canada.

The proposed legislation is set to come into effect as early as late 2024.

The announcement follows the federal government’s allocation of $25 million of its budget to develop a cybersecurity certification for defense procurement over the next three years. 

“The Canadian Program for Cyber Security Certification will help ensure that the Canadian Armed Forces have the secure tools that they need to meet their operational demands, today and into the future,” Anand said in a statement. “Because this certification will increase the trust in the resiliency of Canadian suppliers, our world-class defense industry will also benefit, and be in an even better position to access procurement opportunities with our closest allies.”