Managing Directors use Maple GRC to:

1. Establish and Maintain a Cybersecurity Program:

   • Build a comprehensive program aligned with CyberSecure Canada certification requirements.

   • Develop and implement a cybersecurity strategy tailored to their organization's needs.

2. Risk Management and Controls Alignment:

   • Access relevant cybersecurity risk scenarios and align controls, including CyberSecure Canada controls, to mitigate risks.

   • Utilize Maple GRC to draft and manage cybersecurity policies, ensuring relevance to risks and requirements.

   • Streamline policy workflows, from drafting to staff distribution and updates.

3. Vendor and IT Coordination:

   • Collaborate with IT service providers to ensure required controls are implemented effectively.

   • Manage IT and cloud vendor security posture by issuing questionnaires and verifying their certifications, as required by CyberSecure Canada standards.

4. Staff Training and Awareness:

   • Ensure staff access cybersecurity policies and complete relevant training required for certification.

   • Track training progress to ensure compliance with CyberSecure Canada standards.

5. Compliance and Certification:

   • Monitor the organization's compliance levels with CyberSecure Canada requirements.

   • Manage evidence collection and, when ready, share it with certification bodies to achieve and maintain certification.

IT service providers supporting CFDCs use Maple GRC to:

• Access the required controls they need to implement or verify for effectiveness.

• Follow step-by-step guidance for control implementation, saving time and ensuring efficient operations.

• Upload necessary evidence directly into Maple GRC to support the CFDC’s certification process.

CFDC staff members use Maple GRC to:

• Access organizational cybersecurity policies seamlessly.

• Complete required cybersecurity training to support the organization's certification efforts.

By leveraging Maple GRC, CFDCs in Ontario, their IT service providers, and staff can collaborate effectively to streamline CyberSecure Canada certification, ensuring robust cybersecurity practices while saving time and reducing operational complexity.