CPCSC Level 1 self-assessment
A working assessment template for the 13 controls that comprise Level 1 of the Canadian Programme for Cyber Security Certification. Effective April 1, 2026. Markdown plus CSV for spreadsheet import.
View on GitHubOpen-source tools
Public utilities for Canadian defence procurement.
Northfleet maintains two open-source utilities that contribute to the shared procurement vocabulary for Canadian defence engineering teams, and publishes the specification of its bundle format. Apache 2.0.
ITSG-33 to Kubernetes Protected B mapping
Protected B (Medium) controls mapped to Kubernetes mechanisms, bucketed by admin-implemented, workload-implemented, and external. Keyed to ITSP.10.033-01, the profile that replaced ITSG-33 Annex 4A Profile 1 in April 2026. Markdown and CSV, with an OSCAL rendering of the ITSP.10.033 catalogue, the Medium profile, and the mapping itself. Kyverno policy checks cover eight of the mapped controls, with the verdicts published as OSCAL assessment results.
View on GitHubBundle format specification
The open specification of the Northfleet bundle format, published so that anyone who receives a bundle can verify it with widely available cryptographic tooling, without installing or trusting Northfleet software. Draft until its 1.0 tag.
View on GitHubScope
What's public, and what's not.
The two utilities contain only public material: framework content (CCCS, ITSP.10.171, ITSP.10.033, upstream Kubernetes documentation), openly licensed Kyverno policies, and a community usability layer on top. The bundle format specification is the only artifact of Northfleet's product that is public. Northfleet's bundle protocol implementation, attestation chain implementation, and audit trail emission logic remain proprietary, with source available to engineering and accreditation teams under NDA.
Talk to us