Skip to content
Engage
Canadian Cybersecurity. Risk Management. Strategy. Tactics.

Counsel for a
machine-speed
world.

Cybersecurity, AI and agentic systems, robotics, and the rails of future finance — governed with strategy, executed with tactics.

Strategy without tactics is the slowest route to victory. Tactics without strategy is the noise before defeat. — Sun Tzu

CANADIAN CYBERSECURITY INC. is a management consultancy based out of Vancouver, B.C. We counsel boards and operators on cyber risk, strategy, and tactics.

00 · Signal

Risk is a strategy problem.

Canadian Cybersecurity Inc. helps organizations identify, prepare for, and mitigate cyber risk. We provide counsel in risk management, strategy, and tactics — aligned to the goals of the enterprise, not the noise of the market.

Founded on quality, integrity, and responsibility to clients — we specialize in the development and maintenance of cyber and information security programs based on the organization’s risk profile and appetite.

The approach is pragmatic and risk-based: strategic thinking, foresight, deliberation, and collaboration. We work with leadership to weigh options in the context of appetite — then build the program that can actually be run.

01 · Terrain

New terrain. Same discipline.

Boards now face AI, autonomous agents, robotic process, and digital-asset rails alongside classic cyber risk. We still start with risk management, strategy and tactics.

Dark arctic lattice of ice-teal nodes and filaments, a mesh of digital defense

01 · Core

Cybersecurity

Governance, posture, incident, and assurance. Programs built on the organization’s risk profile and appetite — not a generic checklist.

Swarm of luminous geometric shards connected by thin filaments in void space

02 · Agents

AI & Agentic systems

Models, bots, and software that act. New attack surface, new control problem. Strategy for systems that no longer wait for a human click.

Precision robotic joint in darkness, machined metal catching ice-teal rim light

03 · Machines

Robotics & automation

Operational technology, robotic process, and physical systems with software minds. The board’s risk now includes what moves on the floor.

Crystalline hexagonal lattice receding into darkness, a quiet digital ledger

04 · Ledger

Future finance

Digital banking, crypto-assets, and the rails that move value. Counsel for institutions that cannot afford a failure of trust.

02 · Counsel

Strategy first. Then the tactics that make it real.

Management consulting for organizations that rely on trusted advisors. We evaluate, optimize, or fully develop the cybersecurity strategy and the roadmap of tactics — then orchestrate execution with your team, ours, or specialized partners.

Concentric ice-teal orbital rings around a dark nucleus, an executive constellation

01

Board & executive

  • Executive guidance and advisement
  • Support to leadership, ERM, audit, and board committees
  • Virtual CISO and program leadership
  • Strategy, roadmap, and budget alignment
Hexagonal ice-teal shield lattice receding into darkness

02

Governance & risk

  • Cybersecurity governance and policy framework
  • Risk profile and appetite statements
  • Independent cybersecurity risk assessments
  • Compliance counsel — PIPEDA, OSFI, PCI-DSS, INTERAC, FICOM, GDPR
Radar sweep over a dark operations grid in ice-teal light

03

Assurance & operations

  • Posture and maturity assessments
  • Security architecture and design
  • Vulnerability assessment, penetration testing, secure code review
  • Incident response, breach retainer, digital forensics
Network of luminous nodes connected by thin filaments in void

04

People & enablers

  • Award-winning awareness training and phishing exercises
  • Employee cybersecurity hygiene programs
  • Cyber insurance policy review
  • Capital and operating budget prioritization

03 · Principal

Michael Leung

Founder and management consultant

  • CRISC
  • CGEIT
  • CISM
  • CISA
  • CDPSE
  • CISSP
  • ISSMP
  • C|CISO

An experienced leader in governance and risk management in cyber and information security, with more than twenty years of professional practice and over fifteen years of senior management responsibility — including executive and board-level reporting.

Previously head of Information Security at a Canadian financial institution. Background spans enterprise strategy, operational risk, ERM, architecture, cloud, digital banking, and disruptive technology — supported by a traditional engineering discipline with a focus on business objectives.

Past President and Board Chair of the ISACA Vancouver Chapter; served on ISACA International’s Relations Board and as Chair of the Enterprise Advocacy Committee.

04 · Engage

We welcome a conversation.

We are here to listen, then formulate and execute the most appropriate plan of attack for your cybersecurity issues and concerns.

Contact CANADIAN CYBERSECURITY INC. in Vancouver to start that conversation.