[{"data":1,"prerenderedAt":128},["ShallowReactive",2],{"footer-services-en":3,"footer-local-en":28,"cat-en-compliance":45},[4,8,12,16,20,24],{"path":5,"navTitle":6,"order":7},"\u002Fen\u002Fservices\u002Fcybersecurity-audit","Cybersecurity Audit",1,{"path":9,"navTitle":10,"order":11},"\u002Fen\u002Fservices\u002Fpenetration-testing","Penetration Testing",2,{"path":13,"navTitle":14,"order":15},"\u002Fen\u002Fservices\u002Fmicrosoft-365-google-workspace-audit","Microsoft 365 \u002F Google Workspace Audit",3,{"path":17,"navTitle":18,"order":19},"\u002Fen\u002Fservices\u002Flaw-25-compliance","Law 25 Compliance",4,{"path":21,"navTitle":22,"order":23},"\u002Fen\u002Fservices\u002Fremediation-hardening","Remediation and Hardening",5,{"path":25,"navTitle":26,"order":27},"\u002Fen\u002Fservices\u002Fongoing-security-partner","Ongoing Security Partner (vCISO)",6,[29,33,37,41],{"path":30,"city":31,"translationKey":32},"\u002Fen\u002Fcybersecurity-audit\u002Fmontreal","Montréal","montreal",{"path":34,"city":35,"translationKey":36},"\u002Fen\u002Fcybersecurity-audit\u002Flaval","Laval","laval",{"path":38,"city":39,"translationKey":40},"\u002Fen\u002Fcybersecurity-audit\u002Fsouth-shore","South Shore","rive-sud",{"path":42,"city":43,"translationKey":44},"\u002Fen\u002Fcybersecurity-audit\u002Fnorth-shore","North Shore","rive-nord",[46,51,55,59,63,67,71,76,80,84,88,92,96,100,104,108,112,116,120,124],{"path":47,"title":48,"description":49,"category":50,"minutes":27},"\u002Fen\u002Fblog\u002Fbill-c-8-ccspa-suppliers","Bill C-8 and the CCSPA: What It Means for Canadian Suppliers","Bill C-8 is law, and the CCSPA will push cyber security obligations down the supply chain. What telecom, bank and transport suppliers should prepare now.","compliance",{"path":52,"title":53,"description":54,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fcpcsc-cyber-certification-defence-suppliers","CPCSC Certification: A Practical Guide for Defence Suppliers","CPCSC certification explained: the 3 levels, the 13 Level 1 controls and a practical plan for Montréal aerospace suppliers bidding on Canadian defence work.",{"path":56,"title":57,"description":58,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fconfidentiality-incident-register-template","Confidentiality Incident Register: A Law 25 Template","The confidentiality incident register Québec’s Law 25 requires: the 8 mandatory fields, a copy-ready template, filled-in examples and retention rules.",{"path":60,"title":61,"description":62,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fcyber-insurance-questionnaire-requirements","Cyber Insurance Questionnaire: How to Answer It Right","Cyber insurance questionnaire: the controls insurers check (MFA, EDR, backups), the traps that put coverage at risk and the evidence to gather before you sign.",{"path":64,"title":65,"description":66,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fcybersecure-canada-certification-smb","CyberSecure Canada Certification: Is It Worth It for an SMB?","CyberSecure Canada certification explained: what the CAN\u002FDGSI 104 standard requires, how the audit works, its limits, and which businesses actually benefit.",{"path":68,"title":69,"description":70,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fcyberattack-who-to-notify-canada","Cyberattack: Who to Notify in Canada, and in What Order","Hit by a cyberattack? Who to notify in Canada (insurer, bank, police, CAI, OPC, clients, Cyber Centre), in what order and under which law, step by step.",{"path":72,"title":73,"description":74,"category":50,"minutes":75},"\u002Fen\u002Fblog\u002Fcybersecurity-statistics-quebec-canada","Cybersecurity Statistics for Quebec and Canada (2026)","Cyberattacks on small businesses, costs, privacy incidents reported to the CAI, fraud losses, recovery times: verified, sourced figures for Quebec and Canada.",7,{"path":77,"title":78,"description":79,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fevaluate-it-provider-security","How to Evaluate Your IT Provider's Security: 12 Questions","Your managed IT provider holds the keys to your business. Here are 12 questions to ask, what a good answer looks like, and what to put in the contract.",{"path":81,"title":82,"description":83,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fiso-27001-vs-soc-2-smb","ISO 27001 vs SOC 2: Which One Should Your SMB Choose?","ISO 27001 vs SOC 2: certification versus attestation report, the real effort for an SMB, what buyers in Canada, the U.S. and Europe expect, and where to start.",{"path":85,"title":86,"description":87,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Finformation-security-policy-template-small-business","Information Security Policy Template for Small Business","A 12-section information security policy template you can adapt, who should sign it, how it ties into Quebec's Law 25 and PIPEDA, and the mistakes to avoid.",{"path":89,"title":90,"description":91,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Freport-confidentiality-incident-cai-law-25","Law 25 Breach Notification: Reporting an Incident to the CAI","When and how to report a confidentiality incident to Québec’s CAI under Law 25, minus the 72-hour myth: harm assessment, notice content and next steps.",{"path":93,"title":94,"description":95,"category":50,"minutes":27},"\u002Fen\u002Fblog\u002Flaw-25-privacy-policy-template","Law 25 Privacy Policy: Required Content and a Template","Quebec Law 25 privacy policy: who must publish one, what it must contain under ss. 8, 8.1 and 8.2, a template outline to adapt, and the mistakes to avoid.",{"path":97,"title":98,"description":99,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fnist-csf-2-small-business","NIST CSF 2.0 for Small Business: The Six Functions Explained","NIST CSF 2.0 explained for Canadian small businesses: the six functions including Govern, the NIST quick-start guide and how to build a target profile.",{"path":101,"title":102,"description":103,"category":50,"minutes":27},"\u002Fen\u002Fblog\u002Fpci-dss-4-small-business","PCI DSS 4.0.1 for Small Businesses That Accept Cards","PCI DSS 4.0.1 for Canadian small businesses: which SAQ to fill out, what became mandatory on March 31, 2025, and how to shrink your compliance scope.",{"path":105,"title":106,"description":107,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fprivacy-impact-assessment-pia-quebec-security","Privacy Impact Assessment in Québec: Adding the Security Lens","Privacy impact assessments under Québec’s Law 25: when a PIA is mandatory, how to build security into it and how to score risks, with an SMB example.",{"path":109,"title":110,"description":111,"category":50,"minutes":27},"\u002Fen\u002Fblog\u002Fquebec-law-25-cybersecurity-checklist","Quebec Law 25 Compliance Checklist: The Cybersecurity Side","A practical Quebec Law 25 compliance checklist for SMBs: governance, access control, technical safeguards, incident handling and vendors, mapped to the Act.",{"path":113,"title":114,"description":115,"category":50,"minutes":27},"\u002Fen\u002Fblog\u002Fquebec-law-25-fines-penalties","Quebec Law 25 Fines and Penalties: How the CAI Enforces It","Quebec Law 25 fines: up to $10M in administrative penalties and $25M in penal fines. How the CAI sets amounts, its other powers and how to reduce your risk.",{"path":117,"title":118,"description":119,"category":50,"minutes":27},"\u002Fen\u002Fblog\u002Fquebec-law-25-cookies-consent-website","Quebec Law 25 and Cookies: What Your Website Must Do","Quebec Law 25 cookie rules explained: what section 8.1 and the CAI require, which cookies must be off by default, and how to set up a fair consent banner.",{"path":121,"title":122,"description":123,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fquebec-law-25-small-business-where-to-start","Quebec Law 25 for Small Business: Where to Start (30-Day Plan)","Quebec Law 25 for small business: a 30-day plan to name your privacy officer, prepare for incidents, fix your website and adopt your governance policies.",{"path":125,"title":126,"description":127,"category":50,"minutes":23},"\u002Fen\u002Fblog\u002Fprivacy-officer-quebec-security-role","Québec Privacy Officer Under Law 25: The Security Role","The privacy officer role under Québec’s Law 25, from a security angle: default holder, written delegation, security duties, a quarterly dashboard and template.",1792972906203]