Ministries, municipalities and public bodies take online payments for taxes, permits and services, and hold sensitive information about citizens.
These are the issues we see most often in this sector. Each one has a fix.
Online payments
Tax, permit and service payments bring PCI DSS obligations, like any merchant.
Privacy obligations
Quebec public bodies must protect personal information under the province’s access and privacy legislation, modernized by Law 25.
Public accountability
A breach at a public body becomes public quickly, and erodes trust in digital services.
Hover each card to see how we close the gap.
Meet PCI DSS on citizen payments
Payment channels are often added faster than they are secured.
Ubitrak has certified government ministries and municipalities, and scopes every payment channel you operate.
Show citizens their data is safe
Privacy expectations keep rising.
Accel GRC tracks privacy obligations, impact assessments and incidents in one portal.
Test before attackers do
Public systems are scanned and probed constantly.
Ubitrak runs ASV scans and penetration tests and reports findings in plain language for decision-makers.
Ubitrak · Audits and certification
A PCI QSA company since 2011, with 80 assessment clients in 7 countries. PCI DSS, Interac, SOC 2 with CPA firms, ISO 27001, ASV scans and penetration tests, all tracked in the Ubitrak Audit Portal.
Accel PCI · Self-serve PCI compliance
A guided web portal that takes merchants to their PCI DSS compliance certificate in six steps, with a pre-filled questionnaire and a clear to-do list. No support hours or surprise charges.
Accel GRC · Governance, risk and compliance
One portal to manage your cybersecurity obligations: Quebec’s privacy law, PCI DSS and your clients’ security requirements. Includes an internal audit report, training and document templates. Built and supported by Montreal experts.
Case study
A turnkey project team for a research network’s computing platform
The challenge
Bridging the needs of developing resources. ArcticNet first planned to hire a single developer.
What we did
- Understand the needKW ConsultingThrough discussion we found that a turnkey solution would serve ArcticNet significantly better than one hire.
- Part-time project managementKW ConsultingWe provided a part-time project management service.
- The right resourcesKW ConsultingWe supplied the resources needed for all of ArcticNet's business needs.
The result
- 2017collaboration ongoing since September
- 1computing platform delivered beyond the initial expectations
Client work is confidential. Real case studies are published only with the client’s written approval.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.