01 · Core
Cybersecurity
Governance, posture, incident, and assurance. Programs built on the organization’s risk profile and appetite — not a generic checklist.
Counsel for a
machine-speed
world.
Cybersecurity, AI and agentic systems, robotics, and the rails of future finance — governed with strategy, executed with tactics.
Strategy without tactics is the slowest route to victory. Tactics without strategy is the noise before defeat. — Sun Tzu
00 · Signal
Risk is a strategy problem.
Canadian Cybersecurity Inc. helps organizations identify, prepare for, and mitigate cyber risk. We provide counsel in risk management, strategy, and tactics — aligned to the goals of the enterprise, not the noise of the market.
Founded on quality, integrity, and responsibility to clients — we specialize in the development and maintenance of cyber and information security programs based on the organization’s risk profile and appetite.
The approach is pragmatic and risk-based: strategic thinking, foresight, deliberation, and collaboration. We work with leadership to weigh options in the context of appetite — then build the program that can actually be run.
01 · Terrain
New terrain. Same discipline.
Boards now face AI, autonomous agents, robotic process, and digital-asset rails alongside classic cyber risk. We still start with risk management, strategy and tactics.
02 · Agents
AI & Agentic systems
Models, bots, and software that act. New attack surface, new control problem. Strategy for systems that no longer wait for a human click.
03 · Machines
Robotics & automation
Operational technology, robotic process, and physical systems with software minds. The board’s risk now includes what moves on the floor.
04 · Ledger
Future finance
Digital banking, crypto-assets, and the rails that move value. Counsel for institutions that cannot afford a failure of trust.
02 · Counsel
Strategy first. Then the tactics that make it real.
Management consulting for organizations that rely on trusted advisors. We evaluate, optimize, or fully develop the cybersecurity strategy and the roadmap of tactics — then orchestrate execution with your team, ours, or specialized partners.
01
Board & executive
- Executive guidance and advisement
- Support to leadership, ERM, audit, and board committees
- Virtual CISO and program leadership
- Strategy, roadmap, and budget alignment
02
Governance & risk
- Cybersecurity governance and policy framework
- Risk profile and appetite statements
- Independent cybersecurity risk assessments
- Compliance counsel — PIPEDA, OSFI, PCI-DSS, INTERAC, FICOM, GDPR
03
Assurance & operations
- Posture and maturity assessments
- Security architecture and design
- Vulnerability assessment, penetration testing, secure code review
- Incident response, breach retainer, digital forensics
04
People & enablers
- Award-winning awareness training and phishing exercises
- Employee cybersecurity hygiene programs
- Cyber insurance policy review
- Capital and operating budget prioritization
An experienced leader in governance and risk management in cyber and information security, with more than twenty years of professional practice and over fifteen years of senior management responsibility — including executive and board-level reporting.
Previously head of Information Security at a Canadian financial institution. Background spans enterprise strategy, operational risk, ERM, architecture, cloud, digital banking, and disruptive technology — supported by a traditional engineering discipline with a focus on business objectives.
Past President and Board Chair of the ISACA Vancouver Chapter; served on ISACA International’s Relations Board and as Chair of the Enterprise Advocacy Committee.