CyberSecure Canada Certification Mark ### 📋 Eligible Entities - Canadian businesses of all sizes (micro, small, medium, large enterprises) - Private sector organizations - Organizations across all industries seeking to demonstrate cybersecurity compliance - Entities with operational presence in Canada - Organizations managing customer data or critical systems ### 💰 Funding Details - Grant Type: Non-repayable certification funding (not a traditional grant with direct monetary disbursement) - Cost Structure: Organizations pay certification assessment and audit fees; funding may offset costs through tax credits or subsidies (verify current program structure) - Matching Requirements: Typically no matching funds required - Repayability: Non-repayable; certification is earned through compliance demonstration ### 🛠️ Approved Expenses - Cybersecurity baseline control implementation costs - Development and documentation of incident response plans - Secure device and software configuration - Employee cybersecurity awareness training programs - Security assessments and gap analysis - Certification audit and assessment fees - Consultation services for compliance preparation ### ⚠️ Conditions & Milestones - Baseline Controls Requirement: Must implement and demonstrate federal cybersecurity baseline controls - Documentation: Comprehensive incident response plan required and documented - Technical Standards: Devices and software must meet secure configuration standards - Training Completion: Mandatory employee cybersecurity awareness training - Third-party Verification: Independent audit/assessment required to validate compliance - Ongoing Compliance: Certification requires periodic recertification and maintenance of controls - Timeline: Assessment period varies; typical certification validity is 1-2 years with renewal requirements