Security assessments
A structured review of your accounts, devices, network, backups and staff practices, with a prioritized list of fixes and what each one costs.
- Account and access review
- Device and network checks
- Backup and recovery review
- Prioritized remediation plan
Security hardening
Putting the fixes in place: multi-factor authentication, device encryption, email protection, least-privilege access and logging.
- Multi-factor authentication rollout
- Email security (SPF, DKIM, DMARC)
- Endpoint protection
- Staff security awareness sessions
Privacy and data governance
Practical policies for how your business collects, stores, shares and deletes personal information, aligned with Canadian privacy requirements.
- Data inventory
- Retention schedules
- Access policies
- Incident response plan
Database administration
Setup, tuning, backups and access control for business databases, with documented recovery steps.
- Database setup and migration
- Performance tuning
- Backup and restore procedures
Data analytics and business intelligence
Dashboards and reports that bring together sales, operations and finance data so managers can see what is happening without building spreadsheets by hand.
- Data source mapping
- Dashboard design
- Automated reporting
- Metric definitions
From first call to handover.
Every Cybersecurity & Data engagement follows the same four steps.
Scope
A short call or written request to understand what you need, your deadline and any requirements from third parties.
Proposal
A written proposal with scope, deliverables, timeline and a fixed price or monthly fee. Nothing starts until you approve it.
Delivery
The work is done in agreed stages, with a named contact and regular updates in English or Spanish.
Handover and support
You receive the files, accounts and documentation, plus an optional support plan.
Frequently asked.
Something else on your mind? Ask us directly through the contact form.
Is a security assessment the same as a penetration test?
No. Our assessment is a practical review of your setup and practices for small and mid-sized businesses. When a formal penetration test is required, for example by a client contract or insurer, we scope it and coordinate it with a qualified testing firm.
We are a small business. Are we really a target?
Most attacks on small businesses are automated: stolen passwords, fake invoices and phishing emails. A few basic controls stop most of them, and that is where we start.
Which privacy laws apply to us?
Most private businesses in Alberta fall under Alberta’s Personal Information Protection Act or the federal PIPEDA. We help you put practical controls in place; for legal interpretation, we refer you to a qualified lawyer.
Request a quote for Cybersecurity & Data
Tell us what you need and your deadline. We reply within two business days with questions or a written proposal.