Everything worth knowing about CPCSC and ITSP.10.171, or a link to where it lives. If you've found something that belongs here, add it.
| Page | What's in it |
|---|---|
| Government | PSPC, the Cyber Centre, the Standards Council of Canada, CanadaBuys, and the Cyber Centre guidance behind individual requirements |
| Standards and frameworks | ITSP.10.171, the NIST publications it comes from, and how the numbering lines up |
| CMMC and the US program | The rule, the clauses, the accreditation bodies, and how the 2 programs compare |
| hans.study | The CPCSC hub, the free book, 14 templates, the policy builder, and free tools |
| Tools and baselines | Hardening baselines, vulnerability feeds, and utilities that help with the technical requirements |
| Glossary | The terms you'll meet in a contract, an assessment, or a standard |
Three ways, in order of effort:
- Email contact@hans.study with the link and a line on why it's useful.
- Open an issue with the suggest a resource form.
- Send a pull request that adds a row to the right page. Fork the repo, edit the table, and open the request; GitHub's pull request guide walks through it.
What gets in: primary sources, free tools, and material that's accurate, current, and useful to a small supplier working toward CPCSC. Each row has a link, a name, and one line on what it covers. Vendor marketing, gated whitepapers, and anything that can't be checked don't make the cut.
Anything you contribute is shared under CC BY 4.0.