Available for purchase under Government of Canada SaaS Request for Supply Arrangement (RFSA)
Feature Overview
| Feature | Core | Add-On | Custom Add-On |
|---|---|---|---|
| Continuous Compliance | ✅ | ||
| Automated Compliance Verification | ✅ | ||
| AI-Driven Evidence Analysis | ✅ | ||
| Structured Assessments | ✅ | ||
| Canada Protected B Profile | ✅ | ||
| Canada Protected A Profile | ✅ | ||
| Intake Management | ✅ | ||
| SA&A Readiness Assessment | ✅ | ||
| Custom Analytics with Power BI | ✅ | ||
| Environment Integrations (Data Centre, AWS, Azure, GCP) | ✅ |
Core Features
Continuous Visibility
Never fall behind on compliance requirements. IronFort continuously monitors your systems and processes against ITSG-33 controls to ensure alignment at all times.
Automated Compliance Verification of Technical ITSG-33 Controls
Reduce manual checks and human error. Our automation engine verifies technical controls on an ongoing basis, ensuring accuracy and reducing audit preparation time.
AI-Driven Evidence Analysis for Management & Operational Controls
Upload your policies, logs, and operational data — Iron Fort’s AI automatically reviews, classifies, and validates evidence for management and operational controls, saving compliance teams countless hours.
Structured Assessments
Define a profile benchmark set of controls based on data classification. Each new system — application or infrastructure — can leverage IronFort’s built-in Data Classification Assessment tool to determine the applicable profile.
This ensures:
-
A clear, repeatable set of benchmark controls for each assessment
-
Faster assessments by matching profile-to-data classification
-
Reduced assessor workload and increased consistency
Canada Protected B
Medium Integrity, Medium Availability Profile
Built to align with Protected B requirements, Iron Fort supports environments where medium confidentiality, integrity, and availability protections are required.
Canada Protected A
Low Integrity, Low Availability Profile
For organizations operating at the Protected A level, Iron Fort ensures compliance with low confidentiality, integrity, and availability needs, while still providing automated oversight.
Add-On Features
Intake Management
Enable central IT Security teams to initiate the Security Accreditation and Assessment (SA&A) process with a streamlined Intake Management Tool.
SA&A Readiness Assessment
Optimize scarce IT resources by conducting a rapid readiness assessment during intake. Requests that are ready move forward, while others can be queued or improved before full assessment — saving valuable time and resources.
Custom Add-Ons
Custom Analytics with Power BI
Access a dedicated Power BI workspace pre-loaded with your Iron Fort data. Build custom dashboards, analytics, and compliance insights tailored to your organization.
Environment Integrations
Iron Fort can be fully integrated into your own environments, including:
-
On-Premises Data Centres
-
AWS
-
Azure
-
Google Cloud (GCP)
Custom Add-Ons are delivered through collaborative implementation with Iron Fort Engineers, ensuring seamless integration into your unique environment.