Compliance and cybersecurity audits

A cybersecurity questionnaire is a set of questions a client, supplier, or insurer sends you to find out how your business protects its systems and data. These questionnaires can be long and technical, and it’s easy to answer them wrong if you don’t have the right resources on hand. We help you understand what’s actually being asked, gather the information you need, and answer accurately so you don’t put a contract or an insurance policy at risk.

Law 25 is Quebec’s privacy legislation that requires businesses to put protective measures in place, appoint a privacy officer, and document how they handle data. It applies to most businesses operating in Quebec, so if yours does, there’s a good chance it applies to you. Our goal is to help you take stock of your obligations, document the right security controls, and make sure your practices actually meet what’s required.

Think about a fire drill, but for cybersecurity. Just like a fire alarm, we simulate an incident so your team can practice responding as if the attack were real. It’s a good way to spot weak points in your response plan before an actual incident happens. We facilitate these exercises so your team knows exactly what to do, who to contact, and how to communicate if a serious incident ever comes up.

Yes, it’s part of the support we give our clients. We work with trusted specialized partners to coordinate the testing, and we help figure out what should be covered. We stay involved while the outside team does the work, and once the results are in, we sit down with you to walk through everything: what was found, and more importantly, what needs fixing first.