MTech Cyber

What is CAN/DGSI:104?

A Canadian cybersecurity framework that outlines the basic security practices organizations should implement to protect their systems, data, and operations from cyber threats.

Who CAN/DGSI:104 Applies To?

The framework was designed primarily for small and medium organizations operating in Canada across a wide range of industries that rely on technology to run their operations and manage data. 💼Professional ServicesLaw firms, consultancies, accounting firms, and other professional service providers that manage client information.

Why CAN/DGSI:104 Was Created?

Cyber attacks increasingly target small and medium organizations because they often lack dedicated cybersecurity resources. Many businesses rely on basic IT protections that were never designed to defend against modern threats. CAN/DGSI:104 was created to address this gap by providing a clear and practical baseline for cybersecurity that organizations can implement regardless of their size.

Is CAN/DGSI:104 Mandatory?

CAN/DGSI:104 itself is not a mandatory regulation. However, many organizations adopt the framework because it supports the CyberSecure Canada certification program and demonstrates responsible cybersecurity practices to customers, partners, and insurers.

Why CAN/DGSI:104 Matters?

Cyber incidents can have significant consequences for businesses. A successful attack may lead to operational downtime, loss of sensitive data, financial loss, and reputational damage. Implementing the controls outlined in CAN/DGSI:104 helps organizations build resilience against cyber threats. These protections are explained in detail in the Security Controls Guide.