Independent prototype. Not a Government of Canada service, not affiliated with it, and not official advice. Always verify anything that matters at the source. How this works

GC Simplified
Security

SRA

Security Risk Assessment

In plain English

The formal look at what could go wrong with a system, how bad it would be, and what is being done about it.

Where you’ll see it

Required before most systems go live. Feeds the authority to operate.

Was this explanation helpful?

Important

GC Simplified is an independent tool, not affiliated with or endorsed by the Government of Canada, and it does not provide official advice. Plain language is an interpretation, and interpretations can be wrong. Always verify against the source and your organization’s own guidance before acting.