Submitting a CPCSC Level 1 self-assessment is an important step for defense suppliers preparing to meet Canadian cyber security requirements. However, completing the assessment doesn’t mean security work is finished. Suppliers must maintain the controls they attested to and retain evidence supporting their results throughout the attestation cycle.