# Practices — RedactLabs

> Source: https://redactlabs.ca/practices/
> Machine-readable Markdown of this page (also served at this URL under `Accept: text/markdown`).

# Where the work goes deeper.

Services state what we do. Practices state who we do it for — and how the work is shaped to the budget, the regulation, and the way a sector buys.

A practice is a discipline, not a brochure. Each one draws on all three of ours — Cybersecurity, Websites & Hosting, and IT & Networking — under one senior team, one method, and one standard of evidence. Security is the foundation, not a retrofit.

## STANDARD OF WORK

- **Tiers** right-sized to the sector’s budget — not enterprise pricing trimmed down.
- **Fluency** in the regulation that governs the sector, written into the work.
- **Procurement** that matches how the sector actually buys.
- **Evidence** of prior delivery in the segment. We have shipped here before.

## WHO WE SERVE

### Growing SMBs

For 5–150-person firms that have outgrown their first-generation IT. Cybersecurity, IT, and web under one team, on a NIST CSF 2.0 baseline.

Managed plans, priced per user.

### Charities & Nonprofits

A five-tier security practice for the Canadian nonprofit sector. Donor-data first. Board-ready output. PIPEDA, Quebec Law 25, and PHIPA, written into every tier.

Five tiers, from a Sentinel Exposure Review™.

### Venues

Secure, accessible websites and right-sized security for Ontario venues and public-facing organizations. Booking flows, segmented networks, a hardened posture by default.

Project or managed.

Identify. Prioritize. Reduce. Verify.

## START HERE