[Verse 1] From CCCS comes the standard we need ITSP ten-one-seven-one to heed Canadian controls for security's sake Mirror NIST eight hundred seventy-one we'll take Download and study every line with care Map each control to show what we can share [Chorus] Build the bridge between standards today CMMC to CPCSC paves the way Rev two to rev three we must compare Find the delta hiding everywhere Crosswalk document worth its weight in gold CMMC CPCSC SOC2 story told [Verse 2] Start with NIST SP eight-oh-oh dash one-seven-one Revision three is where our mapping's begun Compare it close to the Canadian twin ITSP controls let the analysis begin Each requirement numbered line by line Control families in perfect design [Chorus] Build the bridge between standards today CMMC to CPCSC paves the way Rev two to rev three we must compare Find the delta hiding everywhere Crosswalk document worth its weight in gold CMMC CPCSC SOC2 story told [Bridge] What changed from rev two to revision three New controls added for security Identify gaps in the current CMMC base CPCSC foundation takes its place Document differences side by side Make your crosswalk the perfect guide [Verse 3] SOC2 Trust Services in the mix Type two reports with controls that stick Map availability and confidential care Processing integrity everywhere Security principles align the three Standards working in harmony [Final Chorus] Build the bridge between standards today CMMC to CPCSC paves the way Rev two to rev three delta's clear Sellable asset drawing near Crosswalk document worth its weight in gold CMMC CPCSC SOC2 story told [Outro] Defence industrial readiness calls One crosswalk document conquers all Canadian controls meet US compliance needs Your mapping work plants profitable seeds
← 1 Program Structure | 3 Assessment & Certification Process →