Defend & Comply
CPCSC Contract-Ready Assessment
Know your gaps before the contract or the auditor asks.
What it is
A fixed-price check of your organization against Canada's Cyber Security Certification for defence suppliers (CPCSC): Level 1 (13 controls) or Level 2 (98 controls). It produces a gap report, the evidence list an auditor will ask for, a costed fix plan, and a short AI-readiness review. LRJ prepares you for assessment; LRJ is not a certification body and does not certify anyone.
What's included
- Gap report against CPCSC Level 1 or Level 2
- The evidence list an auditor will ask for
- A costed fix plan
- A short AI-readiness review
- A technical plan you can use in a funding application
Who it's for
- Southern Ontario defence suppliers such as machine shops, electronics makers and software firms, from about 20 staff up
Rules and requirements
What it helps you meet
General information, not legal advice. See the Ontario compliance guide. Last verified: November 6, 2026.
Funding that may help
Ways to pay for it
You may qualify; we never promise funding. Last verified: November 6, 2026.
Check your options- FedDev RTRI (Regional Tariff Response Initiative)
For tariff-hit suppliers. The assessment doubles as the technical plan for an application.
- Ontario Together Trade Fund
For tariff-hit suppliers.
- BDC LIFT
Otherwise.
How it works
4 steps, no surprises
- 01
Discovery: contracts, primes, level, where protected information lives
- 02
Fixed-price assessment
- 03
Gap report, evidence list and costed fix plan
- 04
Walk-through and next steps, including funding
Pricing
Fixed prices, quoted after a short discovery call
You know the cost before the work starts.
FAQ
Questions we hear
We'll self-assess Level 1 ourselves.
You can. LRJ checks your answers so the attestation holds up and maps your path to Level 2.
We'll wait until a contract demands it.
Level 2 needs a third-party audit and months of preparation. Waiting risks losing 2027 bids.
Will LRJ certify us?
No. LRJ prepares you for assessment. Certification is done by an accredited third party.
Start here
Find out where you stand, at a fixed price.
A short discovery call, then a fixed-price assessment with a ranked, costed roadmap: what to fix first, what it costs, and what funding may help.