The Canadian Centre for Cyber Security publishes ITSG-33, the IT security risk management framework, with profiles including Protected B Medium-Integrity Medium-Availability (PBMM). Treasury Board policy mandates this baseline for federal cloud workloads.
Canadian federal departments, provincial and territorial governments, Crown corporations and any supplier to federal cloud-hosted programs. ITSG-33 is also widely referenced by Canadian critical infrastructure operators.
Government of Canada departments, provincial agencies, Crown corporations, federal contractors, and Canadian healthcare and financial services firms aligning to government baselines.
Every Canada ITSG-33 / PBMM requirement mapped to the Cloudgenics technical controls that satisfy it, with traceability.
Telemetry, configuration scans and audit logs streaming into a tamper-evident evidence store with retention aligned to the framework.
Standardised auditor walkthrough materials — diagrams, run-books and policy templates — that fast-track the assessment.