Insights

Writing on what actually matters.

Long-form on cybersecurity, charity-sector compliance, and Canadian IT operations — from the engineers running the environments. No listicles. Long-form, and only when something is worth saying.

  1. May 2026 · compliance

    NIST CSF 2.0 for Canadian SMBs — what's actually new

    The Cybersecurity Framework 2.0 added a sixth function (Govern) and refocused the rest. For a Canadian SMB, the practical shift is about ownership, not new controls.

    Read the Insight
  2. Apr 2026 · compliance

    PIPEDA, Quebec Law 25, PHIPA — a privacy primer for Canadian nonprofits

    Three privacy regimes apply to most Canadian charities, and they don't all say the same thing. A short, no-jargon guide to what each one actually requires, who it applies to, and where they conflict.

    Read the Insight
SUBSCRIBE

New writing, when there is something to say.

No marketing, no sales drips. Just the writing. Confirm the link we email you — that click is your consent, and every issue carries a one-click unsubscribe.