Defence Supplier Starter
Contract-Ready Assessment, fixes as quoted, then Managed Compliance.
Defence suppliers
CPCSC readiness for defence suppliers
Win and keep defence contracts with Canada's new Cyber Security Certification.
Who we work with. Southern Ontario defence suppliers such as machine shops, electronics makers and software firms, from about 20 staff up.
Sound familiar?
When organizations like yours call us
- A prime or a bid asked about CPCSC.
- You're not sure whether Level 1 or Level 2 applies to you.
- You also sell to US defence customers who ask about CMMC.
- Tariffs hit your revenue and you need funding for the work.
Rules that apply
What the rules ask of you
General information, not legal advice. Use the compliance guide's filter for your exact profile. Last verified: November 6, 2026.
CPCSC, explained
- Level 1: 13 controls, self-assessed, required since April 1, 2026.
- Level 2: 98 controls, third-party audit, phasing in from spring 2027.
- Level 2 aligns with Canada's ITSP.10.171 and the US NIST SP 800-171 standard behind CMMC, so the work also helps with US defence customers.
- LRJ prepares you for assessment. LRJ is not a certification body and does not certify anyone.
- 01Which defence contracts or primes do you supply?
- 02Has a contract or bid asked for CPCSC yet, and at which level?
- 03Where does protected information live: email, file shares, CAD, ERP?
- 04Do you sell to US defence customers too?
Recommended
Where to start
Bundles are quoted for your organization. Each one is built from services you can also buy on their own.
Defence Readiness Path
Contract-Ready Assessment → Secure Modernization → Managed Compliance, plus CPCSC training.
Funding that may help
Ways to pay for it
You may qualify; we never promise funding. Last verified: November 6, 2026.
Use the eligibility checkerFedDev's defence program RDII has been paused since May 1, 2026.
FAQ
Questions we hear
We'll self-assess Level 1 ourselves.
You can. LRJ checks your answers so the attestation holds up and maps your path to Level 2.
We'll wait until a contract demands it.
Level 2 needs a third-party audit and months of preparation. Waiting risks losing 2027 bids.
Start here
Find out where you stand, at a fixed price.
A short discovery call, then a fixed-price assessment with a ranked, costed roadmap: what to fix first, what it costs, and what funding may help.