CAN/DGSI 104: the national cybersecurity baseline for Canadian small and medium organizations.
CAN/DGSI 104:2021 Rev 1:2024, the standard behind the CyberSecure Canada program, is the baseline cybersecurity controls standard published by the Digital Governance Standards Institute (DGSI) under the Standards Council of Canada. It specifies 18 main controls (55 sub-controls) across two levels, designed specifically for organizations without a dedicated security team—low-burden, affordable, and sector-neutral. Sentrix pre-maps all 18 controls with continuous evidence collection and generates your CyberSecure Canada certification dossier in one click.
18 baseline controls. Practical. Affordable. Nationally recognized.
CAN/DGSI 104 was developed collaboratively by over 170 cybersecurity experts through the DGSI Technical Committee on Cyber Security. The 18 main controls (55 sub-controls) across two levels address the most impactful foundational protections for SMEs: patching, authentication, backups, access control, incident response, and employee awareness. Sentrix automates evidence collection for all 18 controls and maps them simultaneously to NIST CSF and CIS Controls to maximize your compliance ROI.
- Patch management : automated OS and application updates across all devices
- Strong authentication : multi-factor authentication for privileged and remote access
- Data backup and recovery : encrypted backups tested regularly and stored offsite
- Access control : least-privilege access, authorization reviews, user lifecycle management
- Incident response plan : documented procedures for detection, containment, notification, and recovery
- Employee awareness training : regular cybersecurity awareness for all staff, tracked and evidenced
CAN/DGSI 104 · Control coverage
CONTINUOUS MONITORINGFrom baseline controls to CyberSecure Canada certification—in weeks, not months.
18 controls pre-built
All 18 CAN/DGSI 104 main controls are pre-built in Sentrix with automated evidence connectors for patching, MFA, backup status, access reviews, and training completion records.
CyberSecure Canada certification readiness
Sentrix generates your CyberSecure Canada certification evidence package—formatted for submission to an accredited certification body under Innovation, Science and Economic Development Canada.
NIST CSF crosswalk
CAN/DGSI 104 controls map directly to NIST CSF 2.0 functions. Organizations adopting CAN/DGSI 104 as their baseline automatically satisfy a significant portion of the NIST CSF Protect and Detect functions.
SME-sized implementation
CAN/DGSI 104 is designed to be achievable without a dedicated security team. Sentrix provides guided remediation workflows and plain-language evidence collection so any organization can reach compliance quickly.
Canadian data residency
All compliance data stored in Canadian data centres. Aligned with CAN/DGSI 104 requirements for data protection and consistent with Law 25 and PIPEDA obligations for Canadian organizations.
2024 revision ready
Sentrix mappings are fully updated to CAN/DGSI 104:2021 Rev 1:2024 released in December 2024. Framework updates are reflected in your control library automatically—no manual rework required.
Need hands-on support with your certification? See our CAN/DGSI 104 certification support service
Get your CAN/DGSI 104 baseline in place in under 30 days.
30-minute demo. We show you your 18-control coverage against your live infrastructure and generate your gap report before the call ends.