Hans Study Publishes Free CPCSC Readiness Book and Level 1 Policy Builder

Hans Study, CISSP, an independent network and security consultant based in Ontario, Canada, has published The Study Guide to CPCSC Readiness as a free PDF on hans.study. The book is released alongside a CPCSC Level 1 policy builder, templates and checklists, and a CPCSC hub on the site. The resources are aimed at suppliers working toward Canada's cyber certification for defence contracts.

The free book and the companion tools cover the first steps of CPCSC readiness. The policy builder helps suppliers put Level 1 policy documents together, while the templates and checklists give a starting set of documents to work from. The CPCSC hub on the site explains how the programme works, including the 98 requirements, pages on Level 1 and Level 2, a page on whether CPCSC applies to a given organisation, and a comparison of CPCSC and CMMC. All of these resources are available on the website at no cost.

CPCSC is Canada's cyber certification for defence suppliers. Level 1 is required at contract award, and PSPC's timeline puts Level 2 between April 2027 and March 2028, so suppliers bidding on defence work need to understand where they stand. Compliance readiness makes up most of Hans Study's consulting work, starting with CPCSC and extending to CMMC, NIST SP 800-171 and ISO 27001. The practice also covers IT and OT network security and hardening, and physical security systems such as CCTV and access control where they meet the network. Reviews look at the network, the security platform on top of it, and the policy around both, with findings written in plain language. The consultancy works without reseller margin and publishes an independence policy on its site.

The Study Guide to CPCSC Readiness, the Level 1 policy builder, and the templates and checklists can be downloaded and used at hans.study. Other work starts with a scoping call, which can be booked through the contact page. Media enquiries are handled through the media and press page.

About Hans Study

Hans Study, CISSP, is an independent network and security consultant based in Ontario, Canada. Most of the work is compliance readiness, covering CPCSC, CMMC, NIST SP 800-171 and ISO 27001, alongside IT and OT network security and hardening. Physical security systems such as CCTV and access control are covered where they meet the network. Services include network and vulnerability assessments, firewall and Microsoft 365 reviews, network design, fractional CISO and security architect work, independent review, and expert opinion. The practice works without reseller margin and publishes an independence policy. Details at hans.study.