Fortify & Secure
Managed Compliance Services
Controls that keep working, and evidence that stays current.
What it is
A monthly service that keeps your controls working and your evidence current: monitoring, evidence collection, quarterly reviews, policy updates and audit support. It now includes CPCSC Level 1 and Level 2 upkeep for defence suppliers, alongside SOC, ISO and NIST frameworks.
What's included
- Control monitoring and evidence collection
- Quarterly reviews
- Policy updates as staff, systems and vendors change
- Audit support
- CPCSC Level 1 and Level 2 upkeep
Who it's for
- Defence suppliers once their modernization project is finished
- Any organization that has to prove controls to an insurer, customer or regulator
Rules and requirements
What it helps you meet
General information, not legal advice. See the Ontario compliance guide. Last verified: November 6, 2026.
CPCSC (defence supplier cyber certification)
Keeping Level 1 attestations accurate and Level 2 evidence audit-ready.
At renewalCyber insurance
Controls that still match what you signed on the form.
In force since July 1, 2026Ontario public-sector cyber rules (Bill 194 / EDSTA)
Ongoing program evidence for public-sector organizations.
Funding that may help
Ways to pay for it
A monthly operating cost.
You may qualify; we never promise funding. Last verified: November 6, 2026.
Check your optionsNo specific program applies to this service on its own; it is often part of a larger funded project.
How it works
4 steps, no surprises
- 01
Map the controls and evidence you must maintain
- 02
Set up monitoring and an evidence calendar
- 03
Monthly upkeep and quarterly reviews
- 04
Support through audits and renewals
Pricing
Fixed prices, quoted after a short discovery call
You know the cost before the work starts.
FAQ
Questions we hear
We passed. We're done.
Passing is a snapshot. Controls drift as staff, systems and vendors change, and insurers have refused claims where controls drifted after the form was signed.
Related
Often paired with
Start here
Find out where you stand, at a fixed price.
A short discovery call, then a fixed-price assessment with a ranked, costed roadmap: what to fix first, what it costs, and what funding may help.