Mindsec Highlights Readiness Support for Canadian Defence Suppliers Facing CPCSC and CMMC Certification
Oct 28, 2026
Mindsec, a Quebec security compliance company founded in 2023, is highlighting readiness support for Canadian defence suppliers facing both the Canadian Program for Cyber Security Certification (CPCSC) and U.S. CMMC.
Pointe-Claire, Canada, October 28, 2026 -- With the planned November 10 switch to mandatory third-party CMMC assessments suspended and CPCSC Level 2 expected in select Canadian contracts from spring 2027, the Pointe-Claire company says suppliers should prepare for both from one set of evidence.
Mindsec, the Quebec security compliance company founded in 2023, is highlighting readiness support for Canadian defence suppliers facing two certification programs: the Canadian Program for Cyber Security Certification (CPCSC) and the U.S. Cybersecurity Maturity Model Certification (CMMC). The timing isn't accidental. November 10, 2026 was supposed to open CMMC Phase 2, when third-party Level 2 assessments would become the default requirement in applicable U.S. defence solicitations. That step is on hold, and the company says suppliers shouldn't mistake the pause for a reprieve.
What the U.S. pause actually covers
On July 13, 2026, the U.S. Department of War, as the Pentagon now calls itself, suspended the move to CMMC Phase 2 and put later milestones on hold. A CMMC Reform Task Force was given 60 days to review the program, and contracting officers were told to strip Level 2 third-party (C3PAO) and Level 3 requirements from active solicitations as soon as practicable. The review window closed on September 11, and as of late October the Department had published neither the task force's findings nor a new start date.
Far less changed than the headlines suggested. The CMMC program rule at 32 CFR Part 170 has been in force since December 16, 2024, and Phase 1 began when the DFARS acquisition rule took effect on November 10, 2025. Self-assessments still apply, as do the safeguarding and incident-reporting duties in DFARS 252.204-7012 and the NIST SP 800-171 Revision 2 controls expected of anyone handling controlled unclassified information (CUI). Scores still go into the Supplier Performance Risk System, and annual affirmations are still due.
The levels haven't moved either. CMMC Level 1 covers federal contract information (FCI) and the 15 safeguarding requirements in FAR 52.204-21, checked by an annual self-assessment. Level 2 rests on the 110 requirements of NIST SP 800-171 Revision 2 for companies handling CUI, and Phase 2 is when many such contracts would have begun requiring a C3PAO assessment every three years. Level 3 adds 24 requirements selected from NIST SP 800-172 and is assessed by the government's Defense Industrial Base Cybersecurity Assessment Center (DIBCAC).
Canada is running on its own clock
CPCSC is run by Public Services and Procurement Canada (PSPC) and built on ITSP.10.171, the Canadian Centre for Cyber Security's version of NIST SP 800-171. Level 1, launched in April 2026, is an annual self-assessment of 13 controls. It is being introduced into select defence contracts from summer 2026 and is required at contract award rather than at bid. Level 2 brings assessment by certification bodies accredited through the Standards Council of Canada. PSPC said in April that Level 2 would reach select defence contracts beginning in spring 2027; its current program overview lists the level as still under development. Level 3, aimed at the most sensitive work such as weapon systems, is assessed by National Defence.
Here's the catch for anyone selling on both sides of the border. PSPC's January 2026 evaluation of the program says the CMMC final program rule would not allow bilateral reciprocity between another country and the Pentagon, and it calls the failure to reach a reciprocity agreement unexpected. The evaluation also flags the risk of duplicated cost and effort for contractors who need both certifications, a burden it says would fall hardest on small and medium-sized enterprises. Recognition runs one way for now: Canada says it may accept a valid CMMC certification case by case, while the U.S. rule offers no route to recognize CPCSC.
The overlap is large but not exact. The Cyber Centre says there are no substantial technical changes between ITSP.10.171 and NIST SP 800-171, but the Canadian standard follows Revision 3 while CMMC Level 2 is still tied to Revision 2. PSPC lists 98 controls for CPCSC Level 2, against 110 at CMMC Level 2. Even the vocabulary shifts: Canada says "specified information" where the U.S. says CUI. Still, most of the underlying evidence describes the same controls.
One evidence base instead of two
That overlap is what Mindsec's CMMC certification and CPCSC certification support is built around. According to Mindsec, its platform maps controls across frameworks, so evidence gathered once, an access control policy, say, can count toward both NIST SP 800-171 and ITSP.10.171. The mapping also reaches ISO 27001, SOC 2 and NIST CSF. Centralized evidence collection and a policy library vetted by lawyers and auditors sit next to gap identification showing which requirements are met and which remain open.
The software comes with people. Mindsec's security and GRC specialists work alongside a supplier's staff, starting with what the company calls day-one scoping: working out exactly which systems handle FCI, CUI or Canadian specified information, so the compliance boundary is drawn before anyone starts collecting evidence. Mindsec does not perform assessments, issue certificates or act as a C3PAO. Its work comes before an assessor arrives.
Mindsec also pushes back on the idea that size sets the required level. In the U.S., the level follows the information a contract involves. Canada sets levels contract by contract, and Level 2 is meant for contracts involving controlled defence information or more complex cyber-sensitive work. A 20-person machine shop that receives controlled technical drawings can face a heavier requirement than a much larger firm supplying office services.
So why start while the U.S. requirement is on hold? The pause only touches how compliance gets checked; the controls are required today. Canada's Level 2 is still being built, and the company expects assessor time on both sides of the border to tighten once demand returns. Prime contractors can also set their own terms. Elbit Systems of America, for one, sent suppliers an open letter three days after the suspension urging them to keep maturing their programs.
Mindsec has also published two plain-language guides, "CPCSC: Canada's Cyber Security Certification for Defence Suppliers" and "CPCSC vs CMMC Certification: Comparing Canada and the U.S." The company says its approach can cut compliance overhead by up to 70% and get a supplier to CPCSC Level 1 self-assessment readiness in weeks, not months. Level 2 timelines depend on where a supplier starts and how much sensitive contract information it holds.
About Mindsec
Mindsec is a security compliance company founded in Quebec, Canada in 2023. The company combines compliance automation software with hands-on expert guidance to help organizations simplify risk management, data privacy and information security programs. Mindsec supports companies working toward frameworks and standards including SOC 2, ISO 27001, ISO 9001, ISO 42001, PCI DSS, HIPAA, GDPR, NIST, CMMC, CPCSC and Quebec Law 25, and says its approach can help organizations reach certification readiness in as little as six weeks while reducing compliance overhead by up to 70%.
Media Contact
Organization: Mindsec
Email: [email protected]
Phone: 514-887-6463
Location: Pointe-Claire, Quebec, Canada
Website: https://mindsec.io/
Contact Info:
Name: George
Email: Send Email
Organization: Mindsec
Phone: 514-887-6463
Website: https://mindsec.io/
Release ID: 89207652
In case of identifying any errors, concerns, or inconsistencies within the content shared in this press release that necessitate action or if you require assistance with a press release takedown, we strongly urge you to notify us promptly by contacting [email protected] (it is important to note that this email is the authorized channel for such matters, sending multiple emails to multiple addresses does not necessarily help expedite your request). Our expert team is committed to addressing your concerns within 8 hours by taking necessary actions diligently to rectify any identified issues or supporting you with the removal process. Delivering accurate and reliable information remains our top priority.
Sangmidang seeks North American, European expansion through global partnerships
Hur Jin-soo, vice chairman of Korean bakery giant Sangmidang Holdings, met Gellert Global Group (GGG) Chairman George Gellert and U.S. Ambassador to France Charles Kushner in Paris earlier this week to explore broader partnerships in overseas markets. Sangmidang said Wednesday that Hur discussed business developments and potential cooperation with Gellert and other GGG executives. Samlip, Sangmidang’s mass-market bakery subsidiary, could work with GGG to expand through U.S. supermarket and food service distribution networks and potentially enter Canada and Mexico, the Korean company said. U.S.-based GGG imports and distributes food products to retailers, food service distributors, restaurants, hotels, cruise operators and food manufacturers across North America. It sources more than 4,000 products from 60 countries and generates more than $1.7 billion in sales per year. The discussion first took place on Oct. 18 when Hur attended a reception for GGG’s partner firms at the U.S. ambassador’s residence in Paris. Hosted by Kushner, the event brought together about 130 representatives
Hanwha's KAI bid bodes well for another defense leap forward
Hanwha Group’s potential acquisition of Korea Aerospace Industries (KAI) could give the country’s aerospace and defense industry a much-needed boost in the global market, as privately owned defense firms have significantly outpaced their state-backed rival in sales growth. Yet transferring control of a strategically important company to a private conglomerate would also raise questions over national security, market concentration and the public investment underpinning its technological achievements. KAI has remained under state ownership since its establishment in 1999, with the state-run Export-Import Bank of Korea as its largest shareholder, holding a 26.41 percent stake. Hanwha is the second-largest shareholder, with a 15.89 percent stake. KAI’s relatively modest growth compared with private-sector defense counterparts highlights the potential benefits of a change in ownership. Lagging behind other private defense firms, KAI’s annual sales reached 3.69 trillion won ($2.79 billion) in 2025, inching down from 3.81 trillion won in 2023. Over the same period, LIG Defense & Aerospac
Debate grows over KAI privatization as Hanwha aims to expand stake
The privatization of Korea Aerospace Industries (KAI) could gain momentum as the state-run Export-Import Bank of Korea (Eximbank) commissions a 1.8 billion won ($1.36 million) consulting project and the Fair Trade Commission (FTC) highlights the benefits of stronger competition among major defense companies. Although Eximbank and KAI have expressed reservations about a change in ownership, KAI’s slower growth compared to its defense industry peers, despite a boom in arms exports, is fueling calls for privatization. Eximbank is KAI’s largest shareholder, with a 26.41 percent stake. According to Rep. Ahn Sang-hoon of the main opposition People Power Party and other sources, Eximbank recently selected AT Kearney as the preferred bidder for the consulting project and is proceeding with the subsequent steps. The project will examine ways to strengthen Korea’s aerospace industry and foster global anchor companies. Reports that the project was initiated at the government’s request have also sparked controversy. On Oct. 20, KAI CEO Kim Jong-chool said the company’s ownership structure
EMAT seeks to reduce China reliance on rare earth magnets with Pohang facility
Evolution Metals & Technologies (EMAT), a Nasdaq-listed rare earth magnet producer, is making a big bet on Pohang, North Gyeongsang Province, by building a facility capable of producing 10,000 tons of sintered rare earth magnets annually for export to the U.S. and to other global customers seeking to reduce their reliance on China's dominant rare earth supply chain. The company plans to invest approximately 300 billion won ($224 million) in Pohang, including 223.8 billion won earmarked for building initial production capacity on a 118,000-square-meter site at the Blue Valley Industrial Complex in the city by 2027. EMAT and the Pohang city government signed a memorandum of understanding (MOU) on the investment project on Tuesday, with the city pledging administrative support for EMAT's plans. During an interview with The Korea Times, EMAT CEO Frank Moon stressed the need to distinguish between upstream and downstream operations. Citing China's dominance in the supply chain, he said geopolitical issues weigh heavily on the industry, and customers’ growing demand for alternatives to Chi
Regional airports to expand international flights by 11.6% for winter season
Korea Airports Corp., which operates 14 airports nationwide, said Wednesday that airlines will operate 10,208 scheduled flights a week during this winter season, which runs from Oct. 25 through March 27, 2027. International services will account for 3,206 weekly flights, up 11.6 percent, or 332 flights, from the summer schedule, while domestic services will total 7,002 flights a week. The expansion comes as the government seeks to attract 30 million foreign visitors ahead of schedule, with additional airport slots at Gimhae and Cheongju allowing more takeoffs and landings. Gimhae International Airport’s hourly capacity will increase from 27 to 30 flights, while Cheongju’s will rise from eight to 10, the airport operator said. Southeast Asian routes will increase 32.7 percent from the summer schedule to 600 flights a week, while services to China will rise 17.5 percent to 844 weekly flights. New China routes include Gimhae-Xiamen, Gimhae-Guangzhou, Cheongju-Xiamen and Jeju-Shijiazhuang. Gimhae will also introduce daily charter flights to Tokyo’s Haneda Airport starting in December and
Hana Financial opens digital vocational classroom for students with developmental disabilities
Hana Financial Group has opened a digital classroom at a special education school in Seoul to help students with developmental disabilities explore career options and practice workplace skills, the group said Wednesday. The classroom at Miral School in Gangnam District is designed to give students hands-on experience in settings modeled on real workplaces, such as restaurants and cafes. The space is equipped with a range of digital learning tools, including a humanoid robot that can interact through voice conversations, virtual reality devices for vocational training, multimedia kiosks, interactive LED whiteboards and tablets for design practice. The classroom is the first step in Hana Financial’s wider program to aid students with developmental disabilities prepare for working life through digital learning and vocational training. The group plans to establish similar facilities at two more special education schools in Incheon and Daejeon by the first half of next year. Hana is also offering support for teachers and other school staff, with programs aimed at strengthening their profess
Hyundai Motor rises to No. 29 in Interbrand's global brand ranking
Hyundai Motor rose to 29th place in Interbrand’s Best Global Brands 2026 ranking, up two places from a year earlier, with its brand value reaching $25 billion, the automaker said Wednesday. The annual ranking by global brand consultancy Interbrand evaluates brands based on their financial performance, influence on consumers’ purchasing decisions and ability to build long-term loyalty. Hyundai also climbed to fourth among automotive brands from sixth in 2025, extending its streak of annual brand value growth to 17 consecutive years. Hyundai attributed the improvement to its strengthened vehicle lineup, investments in future growth areas such as physical artificial intelligence (AI) and software-defined vehicles (SDVs), and global marketing campaigns tied to major sporting events and cultural initiatives. “Seventeen consecutive years of brand value growth comes from customers who chose Hyundai and from the teams and dealer partners who earned that trust,” Hyundai Motor President and CEO Jose Munoz said. “Improving to fourth among automotive brands reflects both the strength of our
SK Broadband, LS Marine Solution team up to protect vital Asia cable link
SK Broadband, the telecommunications unit of SK Group, is strengthening safeguards around a vital undersea cable linking Korea with Japan and Singapore, partnering with marine engineering specialist LS Marine Solution to speed up emergency repairs along vulnerable coastal stretches. The companies signed an agreement Tuesday to improve the reliability of the Southeast Asia-Japan Cable 2 (SJC2) submarine cable system, SK Broadband said Wednesday. Under the agreement, the companies will maintain emergency response vessels and specialized equipment while standardizing technical data and repair procedures in advance. The goal is to coordinate the entire recovery process, from dispatching crews to retrieving damaged cables, reconnecting lines and precisely reburying them on the seabed, reducing the time needed to restore service. The partnership will focus particularly on shallow coastal waters off Busan, where large vessels have difficulty operating and emergency repairs require specialized marine expertise and rapid response. SK Broadband will contribute cable analysis data and monitoring cap
SK On passes large-scale fire test, bolstering ESS safety credentials
SK On, the battery manufacturing unit of SK Group, passed a major fire safety test for its energy storage systems (ESS), clearing a key hurdle as the company seeks to expand in the global market for grid-scale energy storage. The company said Wednesday that its ESS products met evaluation criteria under UL 9540A, a North American standard used to assess how thermal runaway in batteries can spread heat and fire to surrounding equipment. The large-scale fire test recreates conditions resembling an actual energy storage system fire, examining whether flames or dangerous heat spread to neighboring battery containers. The requirements were tightened in March to establish clearer criteria for assessing fire propagation. During the test, battery cells inside adjacent containers did not experience thermal runaway caused by heat from the container where the fire originated, and temperatures inside the containers remained within the evaluation limits, SK On said. The company attributed the result to a system design that releases heat gradually over an extended period, limiting sudden increases in h
LG Uplus, Ecolab Korea team up to set AI data center cooling standards
As artificial intelligence (AI) servers pack more computing power into less space, the heat they generate is becoming a critical challenge for data centers, prompting LG Uplus and Ecolab Korea to develop standards for liquid cooling systems. The companies signed a memorandum of understanding Tuesday at LG Uplus’ headquarters in Seoul's Yongsan District, to improve cooling system operations and establish procedures for managing coolant quality. The partnership combines LG Uplus’ expertise in building and operating AI data centers with Ecolab Korea’s water treatment and cooling fluid management technologies. The growing use of high-performance graphics processing units (GPUs) has increased heat output in data centers, driving interest in liquid cooling, which can remove heat more efficiently than conventional air cooling. But coolant that deteriorates or equipment that is poorly maintained can undermine cooling performance and lead to hardware failures, making consistent monitoring and operating standards essential. LG Uplus will provide a large-scale liquid cooling test environment b
Bithumb, Mirae Asset, Daishin join growing list of cyberattack victims
Cryptocurrency exchange Bithumb, asset manager Mirae Asset Global Investments and Daishin Securities have become the latest victims of cyberattacks sweeping Korea’s financial sector, industry officials and financial authorities said Wednesday. Daishin Securities said in a press release earlier in the day that personal and credit information belonging to 38,490 customers had been leaked. The brokerage said it detected signs of unauthorized access by a hacker on Oct. 17 to a server linked to online securities account openings for discretionary investment services. Bithumb discovered Tuesday that personal information had been leaked following unauthorized access to its internal mobile groupware system. It is examining the scope of the breach, including whether customer information was compromised. A hacking incident was also reported at Mirae Asset Global Investments, prompting financial authorities to investigate the extent of the damage and the circumstances of the breach. The latest incidents came after Mirae Asset Life Insurance detected unusual activity in some of its systems Sunday
SK hynix pledges to return $75 bil. to shareholders
SK hynix on Wednesday announced a 100 trillion won ($75 billion) shareholder return plan for this year, in order to address the mismatch between its sluggish share price and record-breaking earnings performance. During its third-quarter earnings call, the company said it plans to return 100 trillion won to shareholders, including at least 30 trillion won in cash dividends and more than 60 trillion won through share buybacks and cancellations. “We believe our shares are undervalued, as their current price does not fully reflect the profits and cash flow the company is generating," the company said. "Under these circumstances, we believe repurchasing and canceling our shares is an effective way to increase value per share." "We plan to continue repurchasing shares every quarter within our annual buyback plan," it added. "The board will determine the size of quarterly repurchases after considering share prices, valuations and cash flow." The plan includes the recently completed 40 trillion won share buyback program, with the repurchased shares scheduled to be canceled soon. At a board meet
Is the iPhone Duo for you?
HD Hyundai Q3 net profit up 40% to $1 bil.
YOUR NEWS, OUR NETWORK.
Do you have Great News you want to tell the world?
Be it updates about your business or your community, you can make sure that it’s heard by submitting your story to our network reaching hundreds of news sites across 6 verticals.