Practical notes on PCI DSS, privacy law, security testing and audit, written by the team that does the work. Filter by topic, month or keyword.
SOC 1 vs SOC 2 in Canada: CSAE 3416, CSAE 3000 and what your clients actually need
SOC 1 supports your clients' financial statement audits; SOC 2 addresses security and related criteria. How CSAE 3416 and CSAE 3000 fit, and how to pick.
Read the insight →The new public-sector reporting model (PSAS, 2026-04-01): what municipalities and school boards must prepare
PSAB's Conceptual Framework and PS 1202 apply for fiscal years beginning on or after 2026-04-01. What changes in public-sector statements and how to prepare.
Read the insight →IFRS 18 arrives in 2027: what changes in your income statement and what to start now
IFRS 18 replaces IAS 1 for periods beginning on or after 2027-01-01. New categories, required subtotals and disclosed performance measures: what CFOs should start now.
Read the insight →Revised CAS 240 (fraud) and CAS 570 (going concern): what changes for audits from December 2026
Revised CAS 240 and CAS 570 apply to audits of periods beginning on or after 2026-12-15. What changes for auditors, management and audit committees.
Read the insight →Webinars, conference talks and private sessions on PCI DSS, privacy law and cybersecurity, in English and French.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.