Vanguard Magazine

Sponsored Content ing in increased costs for defence vendors. Despite the potential difficulties, we view the CP-CSC program as a positive devel- opment for the overall security of the de- fence sector. Preparing for the Future of Canadian Cybersecurity Overall, the CP-CSC program represents a significant step forward for Canadian cy- bersecurity. While the transition may pres- ent challenges—including higher costs and the need for comprehensive compliance efforts—the benefits of standardized secu- rity practices are expected to outweigh the initial hurdles. At ADGA, we remain committed to sup- porting our clients and the broader de- fence community through these changes, offering our expertise and guidance to help vendors navigate the new cybersecurity certification landscape. As we continue to adapt and refine our approach, ADGA stands ready to launch our service to help industry partners with their CP-CSC certification in the near fu- ture. Maturity Model Certification (CMMC), which is mandatory for defence contrac- tors in the United States. The CP-CSC aims to protect the sup- ply chain between Canada and the U.S., ensuring that vendors handling sensitive information meet rigorous cybersecurity standards—with the CP-CSC program ex- pected to have significant implications for Canadian defence vendors. While requirements are being finalized, it is anticipated that mandatory cyberse- curity contract requirements will be intro- duced in late 2024 or early 2025. ADGA is already preparing for these changes by aligning our practices with the U.S. Na- tional Institute of Standards and Technol- ogy (NIST) SP 800-171 standard, which is expected to inform the CP-CSC require- ments in Canada. Challenges and Implications for Canadian Vendors The CP-CSC program will bring a stan- dardized approach to cybersecurity, thus raising the baseline for security across Can- ada's defence supply chain. However, the implementation of rigorous standards will not be without challenges. Achieving compliance will require signifi- cant investment in cyber- security infrastructure, personnel, and on- going manage- ment, result- CYBERSECURITY CERTIFICATION? Ready for the Canadian Program for Jean-François Séguin Head, Security Line of Business, ADGA Group PERSPECTIVE ADGA Group ("ADGA"), a longstand- ing defence and security Canadian partner since 1967, plays a pivotal role in the cy- bersecurity landscape. We provide a broad range of security solutions that span both defence and security lines of business. Recently, our Security Line of Business Head, Jean-François Séguin, sat down with Vanguard Radio to discuss our in- volvement in cybersecurity and the Cana- dian Program for Cybersecurity Certifica- tion (CP-CSC). ADGA's Comprehensive Approach to Cybersecurity Our approach to security is holistic, en- compassing strategy development, pro- gram design, emergency management, business continuity planning, maturity assessments, and audits. We conduct cy- bersecurity program reviews, compliance checks, threat and risk assessments, and threat intelligence operations. Our expertise has now extended to sup- ply chain security within the defence sec- tor, ensuring that both physical and elec- tronic security measures are in place and aligned with federal requirements. We emphasize building robust internal cyber- security capabilities, investing in skilled security teams, and developing compre- hensive security policies. These efforts are aimed at creating sustainable cybersecurity programs that prioritize continuous monitoring and improvement. They also address cyberse- curity as a core component of business op- erations, rather than a peripheral concern. The CP-CSC Program: A New Standard for Cybersecurity in Canada The CP-CSC program is an initiative led by Public Services and Procurement Canada (PSPC) to enhance the secu- rity of sensitive government information housed within private sector systems. This program mirrors the U.S. Cybersecurity www.vanguardcanada.com OCTOBER/NOVEMBER 2024 25

• Cover