About Cybersecurity Canada
Cybersecurity Canada (sometimes written Cyber Security Canada) is a free, independent Canadian cybersecurity resource that helps small and medium businesses assess themselves against the Canadian Centre for Cyber Security's 13 baseline controls, grounded in Government of Canada standards.
Our Mission
Cybersecurity Canada exists to help Canadian small and medium businesses understand and improve their cybersecurity posture. We provide free tools and curated resources based on Government of Canada standards, making cyber security in Canada accessible to organizations that may not have dedicated security teams.
Who's Behind This
Cybersecurity Canada is built and maintained by Cyber Unit, a Canadian cybersecurity company. We created this website as a free community resource because we saw firsthand how many small and medium businesses struggle to navigate cybersecurity, not for lack of willingness, but for lack of accessible, practical guidance.
The Canadian Centre for Cyber Security has published excellent standards, but awareness and adoption remain low. We built this site to bridge that gap: to translate those standards into something any business owner can understand and act on, completely free of charge.
We don't collect your data, we don't require sign-ups, and we don't gate the assessment behind a paywall. If you find value in this resource and want help implementing any of the recommendations, we're always happy to chat. There's never an obligation. Reach out to us at [enable JavaScript to see email].
Why This Site Exists
Canadian SMBs face a growing cybersecurity gap. They're increasingly targeted by cyber threats, yet many lack the resources, expertise, or awareness to protect themselves effectively. The Canadian Centre for Cyber Security has published excellent guidance, including the Baseline Cyber Security Controls for Small and Medium Organizations, but awareness and adoption remain low.
We built this site to bridge that gap: to make the Baseline Controls accessible and actionable through a free assessment tool, and to curate the most relevant government resources in one place.
Cybersecurity Canada is an independent resource and is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada.
The information provided on this website is for general educational and informational purposes only and does not constitute professional cybersecurity, legal, IT, compliance, or risk management advice. All content, including assessment results, scores, grades, and recommendations, is provided on a best-effort, "as is" basis without warranties of any kind. We expressly disclaim liability for any errors, omissions, or inaccuracies. Organizations should consult with qualified cybersecurity professionals and legal counsel to assess their specific situation. Use of this website or the assessment tool does not create a professional-client relationship. See our Terms of Use for full details.
Our Team
The team at Cyber Unit includes cybersecurity professionals with experience in Canadian regulatory requirements, Government of Canada security standards, and SMB security operations.
All content published on Cybersecurity Canada is:
- Fact-checked against official Government of Canada publications and recognized cybersecurity frameworks
- Referenced with links to primary sources including the Canadian Centre for Cyber Security, Statistics Canada, and international standards bodies
- Reviewed regularly to ensure accuracy as the cybersecurity landscape and regulatory environment evolve
- Written for business audiences: we translate technical cybersecurity guidance into clear, actionable language
How the Assessment Works
Our free assessment evaluates your organization across the 13 Baseline Control areas defined by the Canadian Centre for Cyber Security:
- Develop an Incident Response Plan (BC.1)
- Automatically Patch Operating Systems and Applications (BC.2)
- Enable Security Software (BC.3)
- Securely Configure Devices (BC.4)
- Use Strong User Authentication (BC.5)
- Provide Employee Awareness Training (BC.6)
- Backup and Encrypt Data (BC.7)
- Secure Mobility (BC.8)
- Establish Basic Perimeter Defences (BC.9)
- Secure Cloud and Outsourced IT Services (BC.10)
- Secure Websites (BC.11)
- Implement Access Control and Authorization (BC.12)
- Secure Portable Media (BC.13)
Each of the 50 questions has four answer options: None, Basic, Moderate, and Strong, reflecting your level of implementation. Your final score reflects your overall alignment with the recommended baseline, and you receive specific recommendations for every question.
Your Privacy
Your assessment answers never leave your browser. No data is transmitted to any server, stored in any database, or shared with anyone. Your answers are saved locally in your browser for up to 48 hours so you can resume or review your results, then automatically deleted. We believe in providing value without collecting data. Read our full Privacy Policy.
Frequently Asked Questions
What is Cybersecurity Canada?
Cybersecurity Canada (cybersecuritycanada.ca) is a free, independent resource that helps Canadian small and medium businesses assess and improve their cybersecurity posture. It provides a free online assessment tool based on the Canadian Centre for Cyber Security's Baseline Cyber Security Controls for Small and Medium Organizations, along with curated educational resources and news about cybersecurity in Canada.
Who is behind Cybersecurity Canada?
Cybersecurity Canada is built and maintained by Cyber Unit (Cyber Unit Security Inc.), a Canadian cybersecurity company. We created this website as a free community resource to help Canadian businesses improve their security posture. The site does not require sign-ups, does not collect personal data, and is not gated behind a paywall.
Is Cybersecurity Canada affiliated with the Government of Canada?
No. Cybersecurity Canada is an independent resource and is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada. Our assessment and educational content reference official Government of Canada publications and standards, but we operate independently as a community resource.
Is Cyber Security Canada a government agency?
No. Cybersecurity Canada (also written Cyber Security Canada) at cybersecuritycanada.ca is an independent resource built and maintained by Cyber Unit. It is not affiliated with the Canadian Centre for Cyber Security, CSE, or the Government of Canada. The free assessment is based on the Centre's publicly available baseline controls.
Is cybersecuritycanada.ca the same as cybersecuritycanada.com?
No. cybersecuritycanada.ca is the free Cybersecurity Canada assessment and resource site built by Cyber Unit. cybersecuritycanada.com is a separate company with no connection to this site.
Who should use the free cybersecurity assessment?
The assessment is designed for Canadian small and medium businesses with fewer than 500 employees. Business owners, managers, and IT professionals can use it to evaluate their organization's security posture against the Government of Canada's recommended baseline controls. No technical expertise is required. The questions are written in plain language.
How much does the assessment cost?
The assessment is completely free with no strings attached. There is no upsell, no email required, no account creation, and no data collected. It is and will remain a free community resource for Canadian businesses.
Is my assessment data private?
Yes. The assessment runs entirely in your browser using client-side JavaScript. Your answers are never transmitted to any server, stored in any database, or shared with anyone. No personal information is collected at any point.