PrivacyCanada
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue
What is Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue?
The Canadian Centre for Cyber Security's 2026 security and privacy control catalogue, ITSP.10.033, which replaced the ITSG-33 Annex 3A catalogue on 31 March 2026: NIST SP 800-53 Rev. 5 adapted to Canadian law and policy, with Privacy Act controls and Canada-specific controls such as sovereignty and jurisdiction risk assessment, each control marked with its status in the ITSP.10.033-01 medium (Protected B) profile. Built from the catalogue's own base statements. It comprises 307 controls organised across 20 domains, and applies in Canada.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue overlaps with the standards you already hold
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue vs ISO 27001:2022View comparison →Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue vs SOC 2View comparison →Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue vs NIST CSF 2.0View comparison →Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue vs GDPRView comparison →Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue vs HIPAAView comparison →Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue vs PCI DSS 4.0View comparison →
What Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue means in your sector
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Healthcare→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Financial Services→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Technology→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Government→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Manufacturing→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Energy→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Retail→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Education→
What Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue means for your job
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for CISOs→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Compliance Officers→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Risk Managers→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for IT Directors→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for DPOs→Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue for Auditors→
Questions people ask about Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue
What is Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue?
The Canadian Centre for Cyber Security's 2026 security and privacy control catalogue, ITSP.10.033, which replaced the ITSG-33 Annex 3A catalogue on 31 March 2026: NIST SP 800-53 Rev. 5 adapted to Canadian law and policy, with Privacy Act controls and Canada-specific controls such as sovereignty and jurisdiction risk assessment, each control marked with its status in the ITSP.10.033-01 medium (Protected B) profile. Built from the catalogue's own base statements.
How many controls does Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue have?
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue contains 307 controls organized across 20 domains.
Where does Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue apply?
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue applies in Canada. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue is covered here?
This page covers ITSP.10.033, first release, effective 31 March 2026; medium-impact profile ITSP.10.033-01 effective 1 April 2026.
Query Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue programmatically
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue, its 307 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue API reference and MCP config →How ready are you for Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .