Field notes from senior engineers.
Practical writing on Canadian IT and AI: networking, Zero Trust security, cloud, and applied AI. Written by the principal engineers who design and run these systems, not a content team.
What's new from our engineers?
14 articles shown
IT consulting
vCIO vs Fractional CIO: What They Do, and Which One You Need
A vCIO often comes with your MSP. A fractional CIO works for you alone. What each does, who answers for your data in Canada, and which to pick.
13 min read
Compliance
Bill C-8 Explained: Is It in Force, and Does It Apply to Your Business?
Bill C-8 is law, but its CCSPA part isn't in force yet. See who it covers, the 72-hour reporting cap, and what suppliers to banks and telcos should prepare.
16 min read
Compliance
Cybersecurity Risk Assessment: A 5-Step Method with a Free Template
Run a cybersecurity risk assessment in 5 steps with our free Excel template: a 5x5 risk matrix, a risk register, and the Canadian rules it supports.
16 min read
Compliance
HIPAA in Canada: Does It Apply, and What PHIPA and PIPEDA Require Instead
HIPAA doesn't apply to most Canadian clinics. See which law does in your province, what a breach costs under PHIPA, and when HIPAA still reaches you.
13 min read
Compliance
What Is a SOC 2 Report? How to Read a Vendor's Report and Spot the Red Flags
What a SOC 2 report is, Type 1 vs Type 2, and how to read a vendor's report in 30 minutes: 12 red flags, plus what PIPEDA, Law 25 and OSFI expect.
17 min read
Compliance
What Is GRC? Governance, Risk and Compliance for Canadian Organisations
What GRC means, which Canadian rules it covers (PIPEDA, Law 25, OSFI, Bill C-8), the tools that run it, and a 90-day plan to start a GRC programme.
14 min read
AI
AI Help Desk for IT Teams: What to Automate First and What to Keep Human
An AI help desk should take triage, answers and status updates first. Identity changes, leavers and incidents stay human. The Canadian rules and costs.
16 min read
AI
AI Strategy Consulting for Small and Mid-Size Businesses: What an Engagement Should Deliver and How to Choose a Firm
What an AI strategy consulting engagement should deliver, what it costs in Canada, the funding that helps, and how to choose a firm without getting burned.
15 min read
Cloud
Cloud Server for Small Business: Options, Real Costs and When On-Prem Still Wins
What a cloud server for small business costs in Canada: Azure Toronto prices in CAD, a 5-year on-prem comparison, PIPEDA and Law 25 rules.
17 min read
Cloud
Managed Cloud Services: What's Included, the Real Pros and Cons, and When to Keep Cloud In-House
What managed cloud services include, what they cost in Canada, the honest pros and cons, and the five cases where keeping cloud in-house is the better call.
15 min read
AI
AI Governance Framework: A Practical Template for Canadian Organisations (Mapped to NIST and ISO 42001)
A 10-part AI governance framework template for Canadian organisations, mapped to NIST AI RMF, ISO 42001, PIPEDA, Quebec Law 25 and OSFI E-23.
14 min read
Managed IT
Co-Managed IT vs Fully Managed IT Services: Which Model Fits Your Team?
Co-managed IT adds a provider to your team. Fully managed hands IT over. Costs in CAD, who owns what, and what PIPEDA and Law 25 change.
8 min read
IT consulting
IT Roadmap for Business: How to Build a 3-Year Plan Your Board Will Fund (Template)
Build an IT roadmap your board will fund: what it includes, a free 3-year template, and the Canadian deadlines in 2026 and 2027 that should set its dates.
13 min read
Security
What Is a Managed Security Service Provider (MSSP)? Services, Pricing and How to Choose
An MSSP watches your systems 24/7 and acts on threats. What managed security services cover, what they cost in 2026, and 8 questions to ask.
16 min read
