Blog Posts

Supply chain attacks like SolarWinds and MOVEit exposed a hard truth: when you outsource work, you also outsource exposure. Yet many organisations still treat third-party risk as a compliance formality—collect a questionnaire, file the score, move on. This post reframes vendor risk as measurable liability with financial, operational, and reputational impact you can quantify. We explore why traditional assessments fail, how continuous monitoring and FAIR-based risk quantification reveal true exposure, and what boards, regulators, and insurers now expect. The takeaway: third-party cyber risk isn’t paperwork—it’s balance-sheet risk.

As enterprises adopt LLMs, chatbots, and AI gateways, attackers are exploiting these new surfaces. This blog helps leaders understand AI-specific risks and industry best practices for securing them.

CISOs are drowning in tools that don’t integrate or speak the language of business impact. In this blog, we unpack Continuous Threat Exposure Management (CTEM): why it’s rising, how it differs from reactive security, and how a liability-first mindset reframes board conversations. It closes with practical first steps to get moving.

Cybersecurity in healthcare is no longer just about protecting data. With ransomware, AI-driven attacks, and service disruptions directly impacting patient care, security has become a patient safety issue. In this interview, Information Security Consultant Trecia Knight shares how healthcare organizations can move from policy to practice, in order to build resilience through visibility, collaboration, automation, and culture.

The August 2025 cyber breach of Canada’s House of Commons exposed sensitive staff data and highlighted a troubling reality: artificial intelligence is reshaping cyber warfare. Attackers now move at machine speed, exploiting vulnerabilities within days and weaponizing stolen data through AI-driven phishing, ransomware, and deepfakes. Yet the same technology offers defenders new tools for anomaly detection, real-time response, and predictive modelling. This incident is a wake-up call for Canada and other democracies to strengthen AI-powered defences, close governance gaps, and treat cybersecurity as a pillar of national security.

Canada is at a turning point in global cybersecurity. Backed by strong alliances, research excellence, and trusted neutrality, Canada has the chance to move from reliable partner to international leader. This article explores how the new National Cyber Security Strategy positions Canada to lead on AI ethics, quantum resilience, and critical infrastructure protection, while confronting challenges in talent, regulation, and visibility.