Ability to provide physical access security policies recognized by the Communication Security Establishment Ability to provide Protected B status at the Canadian Federal Department level Is your system installed on standard server hosting, private cloud or a public cloud? (Comments section) If you selected Cloud-based, are all of your data-cloud servers located in Canada? (Comments section) Ability to provide encryption for data in motion Ability to support encryption at rest Ability to support encryption for the authentication process (2-factor) If yes to #20, what encryption protocol do you use (list of industry protocols)? (Comments section) Ability to provide integrated APIs in your system If yes to #22, have they been validated by the Communication Security Establishment via the Supply Chain Integrity Assessment? (Comment section) The system shall provide security provisions to meet the storage of data for the following classifications: Protect B, Protected A