Practical notes on PCI DSS, privacy law, security testing and audit, written by the team that does the work. Filter by topic, month or keyword.
Bill C-8 is law: what the Critical Cyber Systems Protection Act changes, and when
Bill C-8 received royal assent on 2026-06-15. Why most obligations are not yet in force, what designated operators will owe, and how the law reaches their suppliers.
Read the insight →Bill C-8: Canada revives its critical infrastructure cyber security law
Bill C-8 brings back the Critical Cyber Systems Protection Act for banks, telecoms, energy and transportation. What designated operators would have to do, and why their suppliers should…
Read the insight →Live speaker series
Webinars, conference talks and private sessions on PCI DSS, privacy law and cybersecurity, in English and French.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.