Insights
Practical perspectives on the topics we work with every day — Fractional CISO advisory, security architecture, and privacy compliance. Written for practitioners and decision-makers, not for search engines.
Encrypted data stolen today can be read once a capable quantum computer exists. The standards are final and government deadlines converge on 2030–2035. For most organizations, the hard part is knowing where cryptography lives and how to change it without breaking things.
Read the articleWhat this article covers
All articles
Practical perspectives from our advisory work — more to follow regularly.
The standards are final and government deadlines converge on 2030–2035. The algorithm swap is the easy part; finding, prioritizing, and sequencing the change is architecture work.
The question isn't whether you need a CISO — it's whether you need a full-time one. Most mid-market organizations don't. Here's how to think through the decision.
Most security architecture frameworks start with technology. SABSA starts with your business. Here's why that difference matters, and what it means in practice for your organization.
Bill C-36 is Canada's third attempt to replace PIPEDA. Where reform stands, what the proposed law would change, and the preparation that holds up whatever the final text says. Updated October 2026.