Answer
Procurement Assistance Canada is a free government service helping businesses understand and navigate government procurement processes, including CPCSC security requirements and compliance.
PAC Overview
Procurement Assistance Canada is service within Public Services and Procurement Canada providing education and guidance to businesses on government procurement. The service is free to all Canadian businesses regardless of size or sector.
PAC helps businesses understand procurement processes, identify opportunities, meet requirements, and navigate administrative aspects of government contracting. Regional offices across Canada provide localized support.
Services include workshops, webinars, one-on-one consultations, online resources, and referrals to other relevant programs. PAC focuses on procurement aspects rather than technical consulting—they help businesses understand requirements and processes but don't provide technical implementation services for security controls.
Organizations pursuing government contracts should view PAC as first resource for procurement questions.
Security Related PAC Services
PAC specifically helps businesses understand security requirements in government contracts:
- CPCSC requirements explanation including what CPCSC is, why it's required, which contracts will require it, and what certification levels mean
- Security requirements interpretation helping businesses understand security clauses in RFPs and contracts
- Compliance timing guidance on when certification must be achieved relative to contract award and performance
- Assessment process explanation describing how Level 1 self-assessment and Level 2 external assessment work
- Documentation requirements clarifying what security documentation government expects
- Security organization responsibilities explaining which government organizations handle different security aspects
- Referrals connecting businesses to Cyber Centre, Standards Council of Canada, or other organizations for technical security guidance beyond PAC scope
For organizations new to government contracting or CPCSC, PAC consultation provides valuable orientation without cost.
How to Access PAC Services
Engaging with PAC is straightforward:
- Initial contact via email at tpsgc.pac-cap.pwgsc@tpsgc-pwgsc.gc.ca or through website forms at canada.ca; phone at 1-800-811-1148; or regional PAC offices in major cities
- Request consultation describing your situation, questions, or needs
- Scheduled sessions with PAC advisors typically lasting 30-60 minutes via phone, video conference, or in-person at regional offices
- Prepare questions in advance to maximize session value
- Follow-up support as PAC advisors can provide additional information, referrals, or ongoing guidance as situations evolve
- Group sessions through workshops or webinars covering common topics with multiple businesses simultaneously
- No eligibility requirements—services are available to all Canadian businesses pursuing government contracts
Topics PAC Can Address
PAC provides guidance on broad range of procurement topics:
- Understanding RFPs including interpreting security requirement sections, understanding evaluation criteria related to security, and identifying mandatory vs. point-rated requirements
- Security clauses explaining contract clauses addressing CPCSC compliance, security incident reporting, personnel security, and other security obligations
- Certification timing advising when certification must be demonstrated—at bid submission, contract award, or during performance
- Multiple framework requirements helping businesses understand how CPCSC interacts with other government requirements
- Subcontractor obligations clarifying security requirements that flow to subcontractors
- Documentation for bids identifying what security documentation should be included in proposals
- Compliance demonstration strategies for showing security compliance during procurement
- Debriefing requests explaining how to request feedback after unsuccessful bids to understand security evaluation results
Organizations should prepare specific questions about their situations for most valuable PAC consultations.
What PAC Cannot Provide
Understanding PAC limitations helps set appropriate expectations:
- Technical implementation guidance on how to configure firewalls, implement encryption, or deploy specific security tools—this is beyond PAC scope and should be sought from Cyber Centre, consultants, or vendors
- Legal advice on contract terms, liability issues, or disputes—organizations should consult legal counsel
- Technology recommendations on which security products to purchase or vendors to engage—PAC maintains vendor neutrality
- Competitive intelligence about other bidders or procurement outcomes
- Guarantee of procurement success—PAC helps businesses understand requirements but doesn't influence contract awards
- Security clearances—PAC doesn't process clearances which are handled by appropriate security authorities
Organizations with technical security questions should contact Canadian Centre for Cyber Security; with legal questions should engage counsel; and with clearance questions should contact designated security authorities.
PAC Workshops and Webinars
PAC regularly offers group education sessions:
- CPCSC introduction workshops explaining program basics, requirements, and timelines
- Security requirements overview covering how security fits into broader government procurement
- Small business specific sessions tailored to SMB resources and capabilities
- Regional sessions addressing local business communities
- Topical webinars on emerging procurement issues including security
These group sessions provide efficient way to gain foundational knowledge before seeking individual consultations for organization-specific questions. Organizations should monitor PAC website and mailing lists for upcoming sessions. Sessions are free but may require registration.
Coordinating PAC with Other Resources
PAC works best in combination with other support:
- PAC provides procurement and requirement interpretation
- Cyber Centre provides technical security guidance
- Consultants provide hands-on implementation support
- Industry associations provide peer knowledge and collaboration
- Standards Council of Canada provides assessor information
Organizations should leverage appropriate resource for each need rather than expecting single source to address all needs. PAC advisors can provide referrals helping businesses connect with appropriate resources for technical, legal, or other specialized needs beyond procurement scope.
PAC for Different Business Sizes
PAC adapts services to different organizational capabilities:
- Small businesses with limited government contracting experience receive foundational education on procurement basics including security requirements
- Medium businesses building government contracts practice receive guidance on navigating increasingly complex security requirements as they grow
- Large businesses with mature procurement operations may seek clarification on specific security requirement interpretations or new program elements
- Indigenous businesses can access additional procurement programs beyond PAC including Indigenous business directories and set-asides
Organizations of any size can benefit from PAC services—don't assume PAC is only for small or inexperienced businesses.
Regional vs National PAC
PAC has both national and regional dimensions:
- National PAC provides overarching program information, manages PAC website and online resources, and coordinates regional offices
- Regional offices in provinces and major cities provide localized support, understand regional business environments and industries, and can meet in-person where beneficial
Organizations should generally start with regional PAC office for their location for most personalized service, while using national resources for general information. Regional office contact information is available on PAC website.
Documenting PAC Interactions
Organizations should maintain records of PAC consultations:
- Notes from consultations capturing advice received, questions answered, and referrals provided
- Email correspondence with PAC advisors confirming interpretations or guidance
- Workshop attendance certificates or materials from group sessions
- Questions and answers maintaining list of procurement questions and PAC responses
- Timeline planning using PAC guidance on certification timing and compliance milestones
These records serve as references for internal planning and demonstrate due diligence in understanding requirements if questions arise later. Organizations facing procurement protests or disputes can reference PAC guidance showing good-faith efforts to understand requirements.
PAC Limitations and Complementary Services
While PAC provides valuable free service, limitations exist:
- Generalist vs. specialist knowledge as PAC advisors have broad procurement knowledge but may not have deep technical cybersecurity expertise—they help with process, not technical implementation
- No implementation services since PAC explains what is required but doesn't implement security controls or prepare documentation
- No assessment services as PAC doesn't evaluate compliance or provide pre-assessment services
- Procurement focus means PAC addresses requirements in procurement context rather than broader security program development
Organizations should view PAC as starting point and entry into support ecosystem, complementing PAC guidance with technical assistance from consultants, industry peers, or service providers for implementation support.
Plurilock provides comprehensive CPCSC implementation support including gap assessment, remediation planning, technical implementation, documentation development, and assessment preparation that complements PAC procurement guidance.
Learn More
Additional resources are available:
