Baseline Cyber Security Controls for Small and Medium Organizations

This document presents the Canadian Centre for Cyber Security baseline cyber security controls wherein we attempt to apply the 80/20 rule (achieve 80% of the benefit from 20% of the effort) to the cyber security practices of small and medium organizations in Canada.

Data and Resources

Additional Info

Field	Value
Last Updated	April 17, 2026, 19:01 (UTC)
Created	April 17, 2026, 19:01 (UTC)
contact_email	opengov-gouvouvert@cse-cst.gc.ca
criticality_level	["aboriginal_peoples", "business", "children", "educators", "employers", "funding_applicants", "general_public", "government", "immigrants", "job_seekers", "media", "noncanadians", "nongovernmental_organizations", "parents", "persons_with_disabilities", "rural_community", "seniors", "scientists", "students", "travellers", "veterans", "visitors_to_canada", "women", "youth"]
geographic_scope	[]
open_canada_collection	publication
open_canada_date_published	2020-02-18 00:00:00
open_canada_keywords	{"fr": ["sécurité infonuagique", "cyberdéfense", "identités et mots de passe", "apprentissage", "nettoyage des supports", "mobilité", "securité des réseaux"], "en": ["cloud security", "cyber defence", "identity and passwords", "learning", "media sanitization", "mobility", "network security", "risk management"]}
open_canada_subject	["information_and_communications", "science_and_technology"]
sensitivity_level	unrestricted
title_fr	Contrôles de cybersécurité de base pour les petites et moyennes organisations
update_frequency	not_planned