• Qualify as a supplier to an industry, network or supply chain by meeting their specific cybersecurity requirements
• Obtain certification, approval or accreditation for your product, solution or process.

Some examples of eligible standards and certifications:

• Digital identity and access management (NIST 863-3, Voila Verified, eIDAS, WebTrust, AATL)
• Protection of privacy, personal information and health information (GDPR, PIPEDA, provincial and health-specific legislation)
• Information security (ISO 27001, ISO 27017 and IS0 27 018, ISO 27034, SOC 2 Types 1-2-3, OWASP, SOX, Cyber Security, Cyber Essential PLUS, CMMC, Cloud Security Alliance)
• Payment (PCI-DSS alliance)
• Healthcare (HiTrust, HIPAA, SafeBioPharma Alliance)

• Maximum financial aid is $350,000 per project
• Maximum financial aid may be up to 50% of eligible expenditures 
• Private contributions must represent a minimum of 25% of eligible expenditures
• Cumulative government expenditures can total up to 75% of eligible project expenditures
• Maximum project duration is 2 years.

Also note that:      

• Management fees apply on the total project value (see FAQ)    
• Non-subsidized expenditures may be eligible for tax credits, in particular the Scientific Research and Experimental Development (SR&ED) tax credit, based on the prevailing criteria of these programs.

To be eligible, large businesses or SMEs must:

• Be a private for-profit company with an active place of business in Quebec
• Be legally incorporated under federal or Quebec laws in force and be registered with the Quebec enterprise register
• Have its head office in Quebec and its employees or subcontractors must work mainly from Quebec
• Not be owned by more than 50% by other existing businesses or organizations

To be eligible for the QCIP CERTIFICATION component, projects must meet the following criteria:

• Submit a financial plan detailing the expected contribution and expenses required to execute the project for which the company is seeking funding.
• Aim to obtain certification, approval or accreditation for its products, solutions or processes with regard to cybersecurity
• Allow adaptation of solutions to make them conforming and interoperable with systems and standards in place.
• Seek first-time certification, approval or accreditation of products / solutions / processes already developed to facilitate their commercialization and reach new markets.

Note that the call for QCIP CERTIFICATION projects is open till Mars 2024, 31th.