// framework

NIST SP 800-171 firms in Canada

Requirements for protecting controlled information in non-federal systems, and the basis of the Canadian ITSP.10.171.

2 firms name this framework on its website

Full service · Vancouver, British Columbia

Kobalt.io

Compliance and security firm offering gap assessments, audit readiness, vCISO, penetration testing and incident response, with a fixed-fee CPCSC programme for defence supply-chain vendors.

GRC advisory
Audit and certification
Pen testing
IR and forensics
MDR and SOC
+1

CPCSC
CMMC
NIST 800-171
SOC 2
ISO 27001
+6

Full service · Vancouver, British Columbia

Plurilock

Cybersecurity services firm covering adversary simulation, cloud and data protection, identity and compliance readiness, including CPCSC and CMMC readiness for defence suppliers.

Pen testing
Red team
Cloud security
IAM
GRC advisory
+2

CPCSC
CMMC
NIST 800-171
MITRE ATT&CK
OWASP

Learn more

// more

Other frameworks

A firm appears here only when its own website names the framework. That is not a statement that it is certified, accredited, or qualified for it. Confirm with the firm. How the directory works.