About Cybersecurity Canada
A free, independent resource helping Canadian small and medium businesses understand and improve their cybersecurity posture — grounded in Government of Canada standards.
Our Mission
Cybersecurity Canada exists to help Canadian small and medium businesses understand and improve their cybersecurity posture. We provide free tools and curated resources based on Government of Canada standards, making cybersecurity accessible to organizations that may not have dedicated security teams.
Who's Behind This
Cybersecurity Canada is built and maintained by Cyber Unit, a Canadian cybersecurity company. We created this website as a free community resource because we saw firsthand how many small and medium businesses struggle to navigate cybersecurity — not for lack of willingness, but for lack of accessible, practical guidance.
The Canadian Centre for Cyber Security has published excellent standards, but awareness and adoption remain low. We built this site to bridge that gap: to translate those standards into something any business owner can understand and act on, completely free of charge.
We don't collect your data, we don't require sign-ups, and we don't gate the assessment behind a paywall. If you find value in this resource and want help implementing any of the recommendations, we're always happy to chat — but there's never an obligation. Reach out to us at [enable JavaScript to see email].
Why This Site Exists
Canadian SMBs face a growing cybersecurity gap. They're increasingly targeted by cyber threats, yet many lack the resources, expertise, or awareness to protect themselves effectively. The Canadian Centre for Cyber Security has published excellent guidance — including the Baseline Cyber Security Controls for Small and Medium Organizations (ITSM.10.089) — but awareness and adoption remain low.
We built this site to bridge that gap: to make the Baseline Controls accessible and actionable through a free assessment tool, and to curate the most relevant government resources in one place.
Cybersecurity Canada is an independent resource and is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada.
The information provided on this website is for general educational and informational purposes only and does not constitute professional cybersecurity, legal, IT, compliance, or risk management advice. All content, including assessment results, scores, grades, and recommendations, is provided on a best-effort, "as is" basis without warranties of any kind. We expressly disclaim liability for any errors, omissions, or inaccuracies. Organizations should consult with qualified cybersecurity professionals and legal counsel to assess their specific situation. Use of this website or the assessment tool does not create a professional-client relationship. See our Terms of Use for full details.
Our Team
The team at Cyber Unit includes cybersecurity professionals with experience in Canadian regulatory requirements, Government of Canada security standards, and SMB security operations.
All content published on Cybersecurity Canada is:
- Fact-checked against official Government of Canada publications and recognized cybersecurity frameworks
- Referenced with links to primary sources including the Canadian Centre for Cyber Security, Statistics Canada, and international standards bodies
- Reviewed regularly to ensure accuracy as the cybersecurity landscape and regulatory environment evolve
- Written for business audiences — we translate technical cybersecurity guidance into clear, actionable language
How the Assessment Works
Our free assessment evaluates your organization across the 13 Baseline Control areas defined by the Canadian Centre for Cyber Security:
- Incident Response Planning (BC.1)
- Patch Management (BC.2)
- Anti-Malware (BC.3)
- Secure Configuration (BC.4)
- Authentication (BC.5)
- Security Awareness Training (BC.6)
- Data Backup & Recovery (BC.7)
- Mobile Device Security (BC.8)
- Network & Perimeter Security (BC.9)
- Cloud Services Security (BC.10)
- Web Application Security (BC.11)
- Access Control & Authorization (BC.12)
- Portable Media Security (BC.13)
Each of the 50 questions has four answer options — None, Basic, Moderate, and Strong — reflecting your level of implementation. Your final score reflects your overall alignment with the recommended baseline, and you receive specific recommendations for every question.
Your Privacy
Your assessment answers never leave your browser. No data is transmitted to any server, stored in any database, or shared with anyone. When you close the page, your answers are gone. We believe in providing value without collecting data. Read our full Privacy Policy.
Frequently Asked Questions
What is Cybersecurity Canada?
Cybersecurity Canada (cybersecuritycanada.ca) is a free, independent resource that helps Canadian small and medium businesses assess and improve their cybersecurity posture. It provides a free online assessment tool based on the Canadian Centre for Cyber Security's Baseline Cyber Security Controls for Small and Medium Organizations (ITSM.10.089), along with curated educational resources and news about cybersecurity in Canada.
Who is behind Cybersecurity Canada?
Cybersecurity Canada is built and maintained by Cyber Unit (Cyber Unit Security Inc.), a Canadian cybersecurity company. We created this website as a free community resource to help Canadian businesses improve their security posture. The site does not require sign-ups, does not collect personal data, and is not gated behind a paywall.
Is Cybersecurity Canada affiliated with the Government of Canada?
No. Cybersecurity Canada is an independent resource and is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada. Our assessment and educational content reference official Government of Canada publications and standards, but we operate independently as a community resource.
Who should use the free cybersecurity assessment?
The assessment is designed for Canadian small and medium businesses with fewer than 500 employees. Business owners, managers, and IT professionals can use it to evaluate their organization's security posture against the Government of Canada's recommended baseline controls. No technical expertise is required — the questions are written in plain language.
How much does the assessment cost?
The assessment is completely free with no strings attached. There is no upsell, no email required, no account creation, and no data collected. It is and will remain a free community resource for Canadian businesses.
Is my assessment data private?
Yes. The assessment runs entirely in your browser using client-side JavaScript. Your answers are never transmitted to any server, stored in any database, or shared with anyone. No personal information is collected at any point.