Terms of Use
Please read these terms carefully before using this website or the assessment tool.
Effective date: March 10, 2026
Last updated: March 10, 2026
These Terms of Use ("Terms") govern your access to and use of the website cybersecuritycanada.ca (the "Website"), including the Free Cybersecurity Assessment tool (the "Assessment Tool"), all content, reports, scores, recommendations, and materials provided through the Website (collectively, the "Services"). The Website is operated by Cyber Unit Security Inc. ("we," "us," "our," or the "Company"), a Canadian corporation.
By accessing or using the Website or any of the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree to these Terms, you must not use the Website or the Services.
1. Educational and Informational Purpose Only
The Website and all Services, including the Assessment Tool, results, reports, scores, grades, recommendations, articles, guides, and all other content, are provided solely for general educational and informational purposes. They are intended to help organizations better understand cybersecurity concepts and improve their ability to manage risk.
Nothing on this Website constitutes, or is intended to constitute:
- Professional cybersecurity advice, consulting, or services
- Legal advice or legal opinions
- Information technology (IT) consulting or professional IT services
- Compliance advice, auditing, or certification
- Risk assessment or risk management services
- Insurance advice or recommendations
The Assessment Tool is an educational self-assessment designed to raise awareness about cybersecurity practices. It does not and cannot evaluate the actual security posture of your organization, test your systems, scan your network, or verify the accuracy of your responses. The scores, grades, and recommendations generated by the Assessment Tool are approximate, general in nature, and provided on a best-effort basis. They should not be relied upon as a definitive evaluation of your organization's cybersecurity readiness.
2. No Professional-Client Relationship
Your use of the Website or the Services does not create any professional-client, advisor-client, consultant-client, fiduciary, or any other professional relationship between you and Cyber Unit Security Inc., its directors, officers, employees, contractors, or agents.
You should always consult with qualified cybersecurity professionals, licensed IT consultants, and legal counsel to assess your organization's specific situation, regulatory obligations, and security requirements before making any decisions based on information obtained from this Website.
3. Disclaimer of Warranties
THE WEBSITE AND ALL SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:
- IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT
- WARRANTIES OF ACCURACY, COMPLETENESS, RELIABILITY, TIMELINESS, OR AVAILABILITY
- WARRANTIES THAT THE WEBSITE OR SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS
- WARRANTIES THAT ANY ERRORS, OMISSIONS, OR INACCURACIES IN THE CONTENT WILL BE CORRECTED
While we make reasonable efforts to provide accurate and up-to-date information, we make no representations or warranties of any kind regarding the completeness, accuracy, reliability, suitability, currency, or availability of any information, content, scores, grades, recommendations, or materials provided through the Website or the Services.
Cybersecurity threats, best practices, regulations, and standards change frequently. Information on this Website may become outdated, and we are under no obligation to update it. Any reliance you place on such information is strictly at your own risk.
4. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CYBER UNIT SECURITY INC., ITS DIRECTORS, OFFICERS, EMPLOYEES, CONTRACTORS, AGENTS, AND AFFILIATES SHALL NOT BE LIABLE FOR ANY:
- DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES
- LOSS OF PROFITS, DATA, BUSINESS, GOODWILL, OR REVENUE
- BUSINESS INTERRUPTION OR LOSS OF BUSINESS OPPORTUNITY
- COST OF PROCUREMENT OF SUBSTITUTE SERVICES
- DAMAGES ARISING FROM SECURITY BREACHES, CYBER ATTACKS, DATA LOSS, OR SYSTEM FAILURES
- DAMAGES ARISING FROM ERRORS, OMISSIONS, OR INACCURACIES IN ANY CONTENT, SCORES, GRADES, RECOMMENDATIONS, OR MATERIALS
ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF, OR INABILITY TO USE, THE WEBSITE OR ANY OF THE SERVICES, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER LEGAL THEORY, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Without limiting the foregoing, in no event shall our total aggregate liability to you for all claims arising out of or related to the Website or Services exceed one Canadian dollar (CAD $1.00).
5. Errors and Omissions
The content on this Website, including the Assessment Tool, may contain errors, omissions, inaccuracies, or typographical errors. We do not warrant that any content is free from errors or omissions. We expressly disclaim all liability for errors and omissions in the content, including but not limited to:
- Incorrect, incomplete, or outdated cybersecurity guidance or recommendations
- Inaccurate assessment scores, grades, or categorizations
- Incomplete coverage of relevant cybersecurity controls or threats
- Misinterpretation or misstatement of government standards, frameworks, or regulations
We reserve the right to make changes, corrections, and improvements to the Website and its content at any time without notice.
6. Assessment Tool — Specific Terms
The following additional terms apply specifically to the Assessment Tool:
- Self-reported data: The Assessment Tool relies entirely on your self-reported answers. We have no way to verify the accuracy of your responses, and the results are only as reliable as the information you provide.
- Not a security audit: The Assessment Tool is not a security audit, penetration test, vulnerability scan, compliance assessment, or certification of any kind. It does not test, scan, probe, or evaluate your actual systems, networks, or infrastructure.
- General recommendations: All recommendations provided are general in nature and may not be appropriate for your specific organization, industry, regulatory requirements, or risk profile.
- No guarantee of security: Completing the Assessment Tool or following its recommendations does not guarantee that your organization is secure, compliant with any law or regulation, or protected against any cyber threat.
- Best-effort basis: The Assessment Tool and its content are provided on a best-effort, voluntary basis. We make no commitment to maintain, update, or support the tool.
- Framework reference: The Assessment Tool references the Canadian Centre for Cyber Security's Baseline Cyber Security Controls for Small and Medium Organizations (ITSM.10.089). Our interpretation and presentation of these controls is our own and may differ from the official guidance. Always refer to the official CCCS documentation for authoritative guidance.
7. Independence and Non-Affiliation
Cybersecurity Canada is an independent resource and is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada.
Any references to government resources, standards, frameworks, or publications are for educational and informational purposes only and do not imply any official endorsement, affiliation, partnership, or approval. All trademarks, service marks, and trade names referenced on this Website are the property of their respective owners.
8. Indemnification
You agree to indemnify, defend, and hold harmless Cyber Unit Security Inc., its directors, officers, employees, contractors, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or in connection with:
- Your use of the Website or the Services
- Your reliance on any content, scores, grades, recommendations, or materials provided through the Website
- Your violation of these Terms
- Your violation of any applicable law, regulation, or third-party right
9. Assumption of Risk
By using the Website and the Services, you expressly acknowledge and agree that:
- Cybersecurity is a complex, rapidly evolving field and no resource, tool, or assessment can guarantee security
- The Services are provided free of charge as a community educational resource, and this free provision is made possible in part by the limitations of liability set forth in these Terms
- You assume all risk associated with your use of the Website and the Services, including any reliance on the content, scores, grades, recommendations, or materials provided
- You are solely responsible for your organization's cybersecurity decisions, implementations, and outcomes
10. Third-Party Links and Resources
The Website contains links to third-party websites and resources, including Government of Canada websites. These links are provided for convenience and educational purposes only. We have no control over and assume no responsibility for the content, accuracy, privacy policies, or practices of any third-party website. Inclusion of any link does not imply endorsement or approval.
11. Intellectual Property
All content on the Website, including text, graphics, logos, icons, images, and software, is the property of Cyber Unit Security Inc. or its content suppliers and is protected by Canadian and international copyright laws. You may not reproduce, distribute, modify, or create derivative works from this content without prior written consent, except as expressly permitted for personal, non-commercial educational use.
12. Governing Law and Jurisdiction
These Terms shall be governed by and construed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict of law principles. Any dispute arising out of or in connection with these Terms or the use of the Website shall be subject to the exclusive jurisdiction of the courts of the Province of British Columbia, Canada.
13. Severability
If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such finding shall not affect the validity of the remaining provisions, which shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.
14. Entire Agreement
These Terms, together with our Privacy Policy, constitute the entire agreement between you and Cyber Unit Security Inc. regarding your use of the Website and the Services, and supersede all prior and contemporaneous agreements, representations, and understandings.
15. Changes to These Terms
We reserve the right to modify these Terms at any time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Website after any changes constitutes acceptance of the revised Terms. We encourage you to review these Terms periodically.
16. Contact
If you have questions about these Terms of Use, contact us at:
Cyber Unit Security Inc.
Email: [enable JavaScript to see email]