Fortify & Secure
Managed Security Services
Round-the-clock protection, and a monthly report your insurer can read.
What it is
Round-the-clock protection for a fixed monthly fee: endpoint detection and response on every device, email filtering, multi-factor sign-in rolled out to every account, vulnerability scanning, alert monitoring and response, and a monthly report you can show your insurer.
What's included
- Endpoint detection and response on every device
- Email filtering and DMARC
- Multi-factor sign-in on every account
- Vulnerability scanning
- 24/7 alert monitoring and response
- A monthly report for your insurer
Who it's for
- Anyone facing a cyber-insurance renewal or a customer security questionnaire
- Clinics holding patient records
- Children's aid societies and other public-sector organizations
Rules and requirements
What it helps you meet
General information, not legal advice. See the Ontario compliance guide. Last verified: November 6, 2026.
Cyber insurance
The controls insurers ask about, switched on and watched.
OngoingPIPEDA (privacy)
Safeguards and breach reporting.
Breach statistics due by March 1 each yearPHIPA (health information)
Protecting patient records.
In force since July 1, 2026Ontario public-sector cyber rules (Bill 194 / EDSTA)
The 72-hour incident reporting rule for children's aid societies (since July 1, 2026).
PhasedBill C-8 (Critical Cyber Systems Protection Act)
Supplier requirements flowing down from critical-infrastructure customers.
Funding that may help
Ways to pay for it
Usually an operating cost.
You may qualify; we never promise funding. Last verified: November 6, 2026.
Check your options- OCI Future Ready (Critical Industrial Technologies)
The training element may qualify in eligible sectors.
How it works
4 steps, no surprises
- 01
Baseline: what's switched on today, and what the insurer asks
- 02
Fixed-price set-up of detection, email security and multi-factor sign-in
- 03
24/7 monitoring and response begins
- 04
Monthly report and quarterly review
Pricing
Fixed prices, quoted after a short discovery call
You know the cost before the work starts.
FAQ
Questions we hear
We have antivirus.
Insurers now ask for endpoint detection and response, which spots an attack and isolates the device. Plain antivirus no longer passes the form.
Microsoft 365 is already secure.
The tools are good, but they have to be switched on, configured and watched. The insurance form asks what you've actually turned on.
Start here
Find out where you stand, at a fixed price.
A short discovery call, then a fixed-price assessment with a ranked, costed roadmap: what to fix first, what it costs, and what funding may help.