Kerson Wallaw is a Montreal group of companies in cybersecurity and compliance, at 3 Place Ville Marie. We help Canadian businesses meet the security rules that come with taking card payments, selling to larger clients and handling personal information.
Our divisions — Ubitrak, Accel PCI, Accel GRC and KW Consulting — share one bilingual team of auditors, advisors, engineers and developers. Ubitrak has been a PCI QSA company since 2011.
Ubitrak has assessed under the PCI Security Standards Council since 2011.
Since 2018, in 11 provinces and territories.
Audit, compliance portals and IT delivery under one roof.
Privacy law, security standards and financial reporting.
Every report and meeting in English or French.
In 7 countries, 46 of them active today: PCI DSS, SOC 2, Interac and penetration testing.
Our vision
Every organization can prove its security, and understands what it proves.
Compliance should be a by-product of running a secure business, not a yearly scramble. We want the businesses we serve to see their obligations clearly and meet them with confidence.
Our mission
Assess independently. Equip practically. Deliver the fix.
Through Ubitrak we assess against PCI DSS and other security standards. Through Accel we give businesses portals to stay compliant all year. Through KW Consulting we advise on and close the gaps the audit finds. In English or French, from Montréal.
Independence
The auditor’s word means something.
Ubitrak’s reports are trusted because they are earned, not bought. Assessment and remediation are kept separate, so the people who test your controls never grade their own work.
Plain language
You should understand your own compliance.
Findings, deadlines and costs explained clearly, in English or French, with the reasoning behind every requirement.
One team
Audit, software and delivery under one roof.
Ubitrak assesses, Accel keeps you ready and KW Consulting closes the gaps. One relationship, one point of contact, no finger-pointing between vendors.
Rigour
Evidence over opinions.
Every conclusion rests on evidence you can see. Every finding is tracked to closure, and nothing is signed until it is true.
Ubitrak · Audits and certification
A PCI QSA company since 2011, with 80 assessment clients in 7 countries. PCI DSS, Interac, SOC 2 with CPA firms, ISO 27001, ASV scans and penetration tests, all tracked in the Ubitrak Audit Portal.
Accel PCI · Self-serve PCI compliance
A guided web portal that takes merchants to their PCI DSS compliance certificate in six steps, with a pre-filled questionnaire and a clear to-do list. No support hours or surprise charges.
Accel GRC · Governance, risk and compliance
One portal to manage your cybersecurity obligations: Quebec’s privacy law, PCI DSS and your clients’ security requirements. Includes an internal audit report, training and document templates. Built and supported by Montreal experts.
We hire auditors, security testers, developers and IT consultants who want to work on real compliance problems.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.