Same proven approach, delivered remotely or on-site as needed. Ideal for teams that want executive clarity, fast execution, and evidence-ready outcomes.
Pricing is based on a $1,500 CAD/day rate. Invoices can be issued in CAD.
US engagements can be invoiced in USD (FX-aligned). Scope and deliverables remain identical.
Support for SOC 2, ISO 27001, vendor risk, and board reporting across Canadian and US stakeholder expectations.
A 90-day build program to establish a practical security baseline, operating cadence, and measurable resilience without slowing delivery.
This is a build-with-your-team engagement. We establish a baseline, ship quick wins early, and create a sustainable operating model.
| Deliverable | What you get |
|---|---|
| Security operating model | RACI, governance, policies that matter, and change management for adoption. |
| Identity & privileged access | MFA coverage, admin segmentation, PAM strategy, and access review cadence. |
| Vulnerability & patch program | Tool rationalization, SLAs, triage workflow, and dashboards. |
| Backup & recovery hardening | Ransomware-resilient backup patterns, restore testing, and RTO/RPO alignment. |
| Logging & detection strategy | What to log, where it goes, detection priorities, and IR runbooks. |
| Vendor risk program | Right-sized questionnaires, tiering, and procurement integration. |
| Incident readiness | IR plan, tabletop, comms, and coordination with insurance/legal. |
Clear internal structure for humans and search engines — and a practical path from priority to measurable outcome.