Blog
Audits & testing
How audits and penetration tests work, what they cost, how to read a report and prepare your organization. Know where you stand before you spend.
Business Continuity Plan After a Cyberattack: A Template
Critical processes, RTO and RPO, manual workarounds: a practical business continuity plan template so your small business keeps serving clients after an attack.
6 min read
Does Microsoft 365 Back Up Your Data? What Businesses Should Know
Recycle bins of 14 to 93 days, retention, Microsoft 365 Backup: what Microsoft actually protects, and when your business needs a real Microsoft 365 backup.
5 min read
Employee Offboarding Checklist: Revoking Access Properly
Accounts, sessions, devices, shared passwords and vendor portals: a complete employee offboarding checklist so no access outlives an employee's last day.
5 min read
External vs Internal Penetration Test: Which Comes First?
External vs internal penetration test: what each reveals, typical cost ranges and which to start with for your small business, plus a prep checklist.
5 min read
Google Workspace Security Audit: 12 Settings to Check
A Google Workspace security audit checklist for small businesses: super admins, 2-Step Verification, Gmail, Drive sharing and third-party app access.
6 min read
How to Choose a Cybersecurity Audit Firm in Quebec: 12 Criteria
Written authorization, methodology, sample report, retest, fixed price, independence: 12 vendor-neutral criteria for choosing a cybersecurity audit firm.
6 min read
How to Read a Penetration Test Report (Without Being Technical)
How to read a penetration test report: the executive summary, CVSS severity, attack chains, and how to turn findings into an action plan your team will follow.
5 min read
Incident Response Plan Template for Small Businesses
An incident response plan template for small businesses: roles, response phases, a call tree and privacy obligations under Law 25 and PIPEDA, ready to use.
5 min read
Microsoft 365 Security Audit: 15 Settings to Check
A Microsoft 365 security audit checklist: 15 settings to verify (MFA, admin roles, forwarding, external sharing, audit logs) to stop phishing and payment fraud.
5 min read
Penetration Test Authorization Letter: What It Must Include
Criminal Code, scope, dates, permitted techniques, emergency contacts, data, cloud rules: what a penetration test authorization letter must include in Canada.
5 min read
Penetration Testing Cost in Canada: A Plain-English Guide
What a penetration test is, the main types, indicative Canadian price ranges and the red flags to watch for when comparing pentest quotes for your business.
5 min read
Phishing Simulation for Employees: Train Without Trapping
Phishing simulation for employees: plan a campaign, pick realistic scenarios, track the report rate and train staff without shaming them. A practical SMB guide.
5 min read
Security Audit vs Pentest vs Vulnerability Scan: Which One?
Security audit, penetration test or vulnerability scan? The real differences, what each one delivers and the order that makes sense for a growing business.
5 min read
Small Business Cybersecurity Audit: Steps, Timeline and Cost
What a cybersecurity audit for a Quebec small business involves: the five steps, a realistic timeline, what drives the cost and how to prepare for it.
6 min read
Small Business Cybersecurity Budget: What to Fund First
How much should a small business spend on cybersecurity? A tiered method to build a realistic budget, prioritize spending and get buy-in from leadership.
5 min read
Tabletop Exercise for Small Business: A Ready-to-Run Script
A ready-to-run ransomware tabletop exercise for your small business: roles, a two-hour agenda, timed injects, questions to ask and the after-action report.
6 min read
Web Application Penetration Test and the OWASP Top 10 (2025)
Web application penetration testing explained: the OWASP Top 10 2025 in plain English, how a test runs and how to prepare your customer portal or online store.
5 min read