Cybersecurity Resources
Curated resources for Canadian businesses from Cyber Security Canada, grounded in the Canadian Centre for Cyber Security's Baseline Controls for Small and Medium Organizations, the minimum recommended security standard.
Emergency Actions
If you're experiencing a cyber incident, these resources can help immediately.
Report a Cyber Incident
Report a cyber incident to the Canadian Centre for Cyber Security. They can provide guidance and assistance during an active incident.
Report nowReport Fraud or Phishing
Report phishing, scams, and online fraud to the Canadian Anti-Fraud Centre (CAFC). Call 1-888-495-8501.
Report fraudCurrent Alerts & Advisories
View current cyber threat alerts and security advisories from the Canadian Centre for Cyber Security.
View alertsGovernment Resources
Official Canadian cybersecurity resources and guidance.
Canadian Centre for Cyber Security
Canada's technical authority on cyber security. Provides guidance, services, and threat intelligence for Canadian organizations.
Visit cyber.gc.caGet Cyber Safe
Government of Canada's public awareness campaign with practical tips and resources for individuals and businesses.
Visit getcybersafe.gc.caRCMP Cybercrime
The RCMP's National Cybercrime Coordination Centre (NC3) leads Canada's response to cybercrime.
Learn moreCanadian Anti-Fraud Centre
Central agency for collecting information and intelligence on fraud and identity theft in Canada.
Visit CAFCOffice of the Privacy Commissioner
Oversees compliance with PIPEDA (Canada's federal private-sector privacy law) and investigates privacy complaints.
Visit OPCCASL (Anti-Spam Legislation)
Canada's Anti-Spam Legislation protects Canadians from spam, malware, and related threats to electronic commerce.
Learn about CASLCyber Security Audit Program
The CCCS Cyber Security Audit Program helps Canadian organizations assess and improve their cybersecurity posture through professional audits.
Learn moreCybersecurity Canada is an independent resource and is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada.
Security Frameworks & Standards
International cybersecurity frameworks that complement the Canadian Baseline Controls.
NIST Cybersecurity Framework
A widely adopted framework for managing and reducing cybersecurity risk. Organized around five core functions: Identify, Protect, Detect, Respond, Recover.
View NIST CSFCIS Controls
A prioritized set of cybersecurity best practices created by a global community of IT experts. Practical and implementation-focused.
View CIS ControlsPIPEDA Resources
Canada's federal privacy law requires organizations to protect personal information. Essential reading for any Canadian business handling customer data.
PIPEDA guidanceFree Programs and Funding for Canadian Small Businesses
Government-supported programs and free resources to help Canadian SMBs improve their cybersecurity posture.
Cyber Integration for Businesses (Ontario)
Rogers Cybersecure Catalyst offers sector-specific cybersecurity training, assessments, and expert consultations. Funded by the Government of Ontario and free to eligible participants.
Learn moreIn-Sec-M SME Cyber Security Support
Personalized cybersecurity consulting for NRC IRAP clients, including vulnerability assessments, compliance coaching, and best-practice guidance. Available to existing IRAP clients only.
View programGet Cyber Safe
The Government of Canada's public awareness campaign with practical tips, guides, and resources for individuals and businesses at no cost.
Visit Get Cyber SafeCCCS Baseline Controls Guidance
Free official guidance from the Canadian Centre for Cyber Security on implementing the 13 baseline controls recommended for all Canadian small and medium organizations.
View guidanceCybersecurity Assessment Checklist
A free, printable checklist for Canadian businesses to evaluate their practices against all 13 CCCS Baseline Controls. Review your security posture at a glance.
View checklistNote: CyberSecure Canada is a federal certification program, not a grant or funding program. Businesses must pay for third-party certification through an accredited body. See our guide on cybersecurity certifications in Canada for details on the certification process. Check your provincial government's website for region-specific cybersecurity programs and incentives.