CCSRA: How DND Decides Your CPCSC Level

CPCSC levels are not chosen by suppliers. A cyber security risk assessment on each contract decides. What it weighs, and how to read your own contracts first.