CISSP-led services for Canadian SMBs

Security and AI governance, organized around your next decision.

Start with a defined assessment. Get an executive-friendly report, prioritized recommendations, and a clear route to ongoing leadership when you need it.

Request an AssessmentExplore Services

01 / Security Assessments

Understand exposure and decide what matters first.

All testing is authorized, controlled, and non-destructive. These are assessments, not penetration tests.

External Security QuickCheck

Up to one public domain. A limited, lightweight snapshot for micro-SMBs with a prioritized summary.

From $995 CAD

External Security Assessment

Defined public-domain and IP scope, deeper analyst review, executive report, technical appendix, and remediation roadmap. Typical turnaround: 1–2 weeks.

From $2,500 CAD

Microsoft 365 Security Assessment

Read-only identity, sharing, email, device, and domain configuration review. Entry tier covers up to 25 users; larger tiers are priced by user count.

From $1,995 CAD

Cybersecurity Risk Assessment

Our broad starting point for a growing SMB without a dedicated security leader: governance, people, technology, vendors, incident readiness, and a risk register.

From $5,500 CAD

NIST CSF 2.0 Assessment

A structured, NIST CSF-aligned current-state profile, gap analysis, roadmap, and executive briefing. No certification is issued.

From $7,500 CAD

02 / AI Governance

Turn workplace AI use into a managed program.

Copilot, ChatGPT, shadow AI, data handling, and vendor decisions belong in one practical governance conversation.

AI Governance Starter

AI inventory, shadow AI review, acceptable-use policy, initial risk register, approved-tool model, and leadership roadmap.

From $3,500 CAD

AI Acceptable Use Policy

Included in AI Governance Starter, or available as a standalone policy engagement with defined scope.

From $1,750 CAD

03 / Compliance & Readiness

Prepare for the questions your business will face.

We help identify gaps, organize evidence, and plan remediation. Formal audits and certifications remain with independent qualified bodies.

SOC 2 Readiness

Gap analysis, evidence mapping, policy and control preparation, and audit-readiness roadmap. Broader engagements are typically $9,500 CAD or more.

From $6,500 CAD

Security & Incident Readiness Pack

Core policy set, incident response plan, playbooks, roles, escalation, and leadership review. Optional tabletop exercise from $4,500 CAD. Specialist forensics and containment can be coordinated through partners where needed; this is not 24/7 response.

From $5,500 CAD

Vendor Security Readiness

Review third-party security expectations, current vendor oversight, and practical evidence gaps.

From $2,500 CAD

Cyber Insurance Readiness

Review common insurer security questions, control evidence, and priority improvements before renewal.

From $2,500 CAD

Security Questionnaire Support

Organize accurate responses and supporting evidence for a defined customer questionnaire.

From $1,500 CAD

Combined assessment

Complete Security & AI Readiness Assessment

Combine relevant portions of external security, Microsoft 365, AI governance, risk review, policy readiness, and a prioritized roadmap in one agreed engagement.

Smaller, simple environments start at $4,950 CAD. A typical standard engagement starts at $7,500 CAD. Final scope depends on organization size, tenant size, public footprint, and AI adoption.

Discuss Your Scope

What you receive

  • Executive-friendly assessment and risk summary
  • Analyst-reviewed findings and positive observations
  • Technical appendix where relevant
  • Prioritized remediation roadmap
  • 30/60/90-day plan and leadership review where scoped

04 / Ongoing Security Leadership

Keep the roadmap moving.

Defined monthly senior-practitioner capacity and a three-month initial commitment. Emergency forensics and containment are separate specialist services.

Security Advisor

Monthly review, roadmap tracking, policy and AI questions, quarterly risk review, and about four planned hours per month.

$2,000 CAD/month

Security & AI Lead

Our flagship tier: about eight hours per month, risk-register tracking, executive reporting, vendor questions, and AI governance.

$3,500 CAD/month

Fractional Security Executive

About 14 hours per month, biweekly working sessions, program leadership, board-ready reporting, and an annual NIST CSF assessment.

$5,500 CAD/month

Compare the three tiers

Separate product line

AI Workforce Assistants

Corporate email assistants for helpdesk, security, and operations questions. This product has its own integrations, usage, escalation, and setup scope, separate from advisory services.

Explore AI Assistants

Principal-led delivery

Every assessment is analyst-reviewed and signed off by an experienced CISSP-certified cybersecurity leader. The senior person you speak with is directly involved in the work.

For professional-services teams

Protect client information as workplace AI expands.

See how AI governance, Microsoft 365 security, and a broader readiness review fit Canadian professional-services firms.

Explore the professional-services guide

Choose a useful first step

Start with the question your leaders need answered, then agree on scope before work begins.

Start with clarity

Not sure which service fits?

Tell us what is driving the question. We will help define a right-sized first step.

Book a Free ConsultationRequest an Assessment