Severity: Low New document CA
CCCS publishes overview of Cyber security and privacy risk management lifecycle approach in ITSP.10.035
Original title: Cyber security and privacy risk management: A lifecycle approach - Overview - ITSP.10.035
- Published
- Source: cyber.gc.ca
- Effective
- Not stated
- Deadline
- Not stated
- Framework: CCCS guidance
- ITSP.10.033 Security and privacy controls and assurance activities catalogue source
Why it matters
CCCS has published ITSP.10.035, an overview document outlining a lifecycle approach to cyber security and privacy risk management. This guidance integrates security and privacy considerations into a cohesive risk management framework that organizations can apply throughout their operations. The approach helps organizations systematically identify, assess, and manage cyber and privacy risks as part of their governance and operational processes.
What changed
- CCCS published ITSP.10.035 as a new guidance document on 2026-10-29 providing an overview of cyber security and privacy risk management using a lifecycle approach
- The document establishes an integrated framework combining cyber security and privacy risk management into a single lifecycle methodology
- The guidance presents a structured approach for organizations to manage risks throughout all phases of their operations and systems lifecycle
Who is affected
Canadian organizations subject to CCCS guidance, including federal government entities and critical infrastructure operators; text does not specify sector or size limitations
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.