Government and defence suppliers: ready for the assessment
Companies that supply government and defence and must show cyber-security readiness — the Canadian Program for Cyber Security Certification, the Contract Security Program, Controlled Goods, and in the United States CMMC, NIST SP 800-171 and related requirements. Some estates cannot touch the internet at all.
An illustrative example: a Canadian manufacturer bidding on defence contracts on both sides of the border, preparing its first assessment.What SurroundNet answers today
Marked plainly: what works today, and what is coming next.
Which requirements apply to us?
Canadian government and defence programmes apply from your profile; United States frameworks apply only when you add the United States as a place you operate.
How do we record a certification we hold?
A certified control is a sign-off that carries the certificate reference and its expiry, so you see what lapses and when.
Do we have an incident plan, and is it approved?
An approved incident-response procedure is part of the evidence, alongside the audit trail, access controls and two-factor sign-in.
Are our people cleared and certified?
Staff certification programmes with an assessor and a separate approver; outside credentials and clearances are verified before they count.
Can it run where nothing reaches the internet?
SurroundNet runs as a hosted service, as a dedicated deployment, on your own premises, or fully air-gapped.
Can certification be run as a project?
Yes. Certification readiness runs as a project, with the work generated from the framework’s controls and tracked to completion.
From first conversation to source of truth
- Talk to usTell us the programme or assessment you are preparing for, and how isolated your estate must be.
- Choose the deploymentHosted, dedicated, on-premises or air-gapped.
- Confirm your profileWhere you operate decides which programmes apply.
- Close the actionsEvidence, sign-offs, certified staff — ready before the assessor arrives.
Supply chains share the same requirements. You can introduce a supplier or partner — with their consent.