ADGA Group Consultants Inc. and Plurilock Security Inc. have signed a collaboration agreement to support Canadian organizations pursuing Level 2 certification under the Canadian Program for Cyber Security Certification (CPCSC).
The collaboration brings together complementary capabilities across the certification journey, from readiness and gap assessment through to independent certification.
Under the agreement, Plurilock will provide CPCSC Level 2 readiness, gap assessment, evidence collection and assessment reporting services. ADGA intends to establish and operate an independent certification body for CPCSC Level 2, subject to accreditation.
The two roles will remain operationally separate, with Plurilock supporting organizations through readiness and assessment and ADGA responsible for independent certification decisions once accredited.
Supporting Canadian defence suppliers across the CPCSC certification journey, from readiness through to independent certification.
As CPCSC requirements are introduced into federal defence contracting, companies across Canada’s defence supply chain will need to understand not only what is required of them, but how to prepare for certification.
Level 2 will introduce third-party assessment for organizations handling Controlled Unclassified Information (CUI), making early preparation increasingly important. Identifying gaps, addressing them and gathering the required evidence all take time, particularly for small and medium-sized businesses navigating the requirements for the first time.
The collaboration between ADGA and Plurilock is intended to support that process from preparation through certification, while maintaining the independence required between assessment and certification decisions.
“While CPCSC Level 2 is still ahead of us, the work of preparing industry for it starts now,” said LGen Jean-Marc Lanthier (Ret’d), CEO of ADGA. “Our collaboration with Plurilock lets us put nearly 60 years of trust with Canada’s defence and security community to work, building the certification capability our sector will need to help secure its supply chain.”
CPCSC introduces cyber security requirements for organizations participating in select Government of Canada defence contracts. Level 1 requirements began being introduced in summer 2026, with Level 2 implementation still under development.
Read the full release: https://www.newsfilecorp.com/release/313708/Plurilock-Signs-Collaboration-Agreement-with-ADGA-to-Support-Defence-Suppliers-Pursuing-CPCSC-Certification?k=adga
Preparing for CPCSC?
Connect with our team to discuss readiness, assessment and certification support.
connect@adga.ca