Does ISO 27001 satisfy CPCSC for Ottawa defence contracts?
No. CPCSC is a federal defence-procurement program. ISO 27001 can hold the controls you already run, but it is not a CPCSC level and it is not assessed under the same accreditation scheme.
ISO 27001 · Ottawa, Ontario
ISO 27001 Certification in Ottawa
Ekubic audits information security for companies with sites in Ottawa, Ontario. An accredited certification body issues the ISO 27001 certificate.
Last reviewed .
Why ISO 27001 Certification Matters in Ottawa
Ottawa information-security work is shaped by federal contracting. Defence and security contracts may also ask for the Canadian Program for Cyber Security Certification, which Public Services and Procurement Canada built on ITSP.10.171. ISO 27001 is a management-system certificate. It is not a CPCSC level, and it does not replace a security requirements checklist on a contract.
Departments, Crown corporations, and primes ask for ISO 27001 when they want an accredited third party to have sampled access, suppliers, and incident handling. Use it where the buyer named it. Keep CPCSC, contract security, and Controlled Goods on their own tracks.
How ISO 27001 Auditing Works in Ottawa
An information security audit tests the risk assessment against real access, real suppliers, and a real incident path. The certification cycle is the same sequence everywhere. What changes in Ottawa is the work the audit samples.
| Step | What happens |
|---|---|
| Get a quote | Name the company, the sites, and the standard you want certified. We reply quickly with a written quote. |
| Offer and contract | The offer states scope, timing, and price. The audit is booked after you sign. |
| Stage 1 | The documented system is reviewed, and gaps are named before Stage 2. |
| Stage 2 | The system is audited as it runs. Findings say what must be closed. |
| Certification issuing | An accredited certification body issues the certificate. |
| Surveillance and re-certification | Later visits check that the system still works. Re-certification renews the cycle. |
The eight steps, including both surveillance visits, are set out in how certification works. To start, get a quote for ISO 27001 certification. The quote comes quickly, and the steps after it keep moving.
What an audit visits in Ottawa
The sample follows accounts, devices, and suppliers that can reach the information in scope, including people who work from home in the region. Stage 1 reads the Statement of Applicability. Stage 2 tests whether a joiner, a leaver, and a suspected incident actually run as written.
What the ISO 27001 audit samples here
- Who can reach the information a federal client cares about, and how that access ends.
- A cloud or managed-service supplier that can open that information.
- The path used to report a lost device or a suspected leak, and whether it was followed.
A recommendation is not the certificate. When the audit supports certification, an accredited certification body issues it. Buyers in Ottawa are checking for that certificate. How the same standard looks in whether ISO 27001 is the right certificate is a different operation.
Questions About ISO 27001 Certification in Ottawa
Can a small Ottawa IT firm certify only production SaaS?
Yes, if the Statement of Applicability and the network match that boundary. If administrators, backups, or support sit outside it, the buyer will still ask about those paths.
Who issues the ISO 27001 certificate?
An accredited certification body issues it after the audit supports certification. Ekubic does not issue certificates.
How much does ISO 27001 certification cost in Ottawa?
The written offer prices the scope, the number of systems, and the audit days. A defence-adjacent multi-site scope costs more than a single product environment.
Where does the Ottawa ISO 27001 audit take place?
At the sites and, where needed, the remote workplaces named in the scope. We do not publish a local office. The visit is booked after you sign the offer.
Other ISO Standards in Ottawa
Also in Canada
- ISO 27001 Certification in Toronto
- ISO 27001 Certification in Montreal
- ISO 27001 Certification in Vancouver
- ISO 27001 Certification in Calgary
- ISO 27001 Certification in Edmonton
- ISO 27001 Certification in Winnipeg
- ISO 27001 Certification in Halifax
- ISO 27001 Certification in Quebec City
How these standards differ by industry is in how ISO certification helps businesses. For this standard in this kind of work, see whether ISO 27001 is the right certificate.
Start ISO 27001 certification in Ottawa.
Tell us about your company and the sites in Ottawa, Ontario. We reply quickly with a written quote that states the scope, the timing, and the price, then keep the audit moving. The visit is booked after you sign.