InfoSecHub

home / directory / services

// service

Audits, attestations, and certification in Canada

Readiness work and independent assessments for standards such as ISO 27001, SOC 2, and PCI DSS.

14 firms list this service

Specialist · Toronto, Ontario

Canadian Cyber

Toronto firm offering ISO 27001 and SOC 2 consulting, internal audits, audit simulation workshops, virtual CISO services and CIS framework implementation.

  • GRC advisory
  • Audit and certification
  • ISO 27001
  • SOC 2
  • CIS Controls
Focused · Winnipeg, Manitoba

Castellan Information Security Services Inc.

Governance, risk and compliance services including gap analysis, policy development, audit preparation, CPCSC and CMMC readiness, penetration testing, business continuity, and security staff augmentation.

  • GRC advisory
  • Audit and certification
  • Pen testing
  • IAM
  • CPCSC
  • CMMC
  • PCI DSS
Focused · Montreal, Quebec

CyberSpective

Montreal-based firm offering virtual CISO, privacy impact assessments, cybersecurity maturity assessments and audits, vendor risk, governance consulting, penetration testing and awareness training across Canada.

  • GRC advisory
  • Privacy
  • Pen testing
  • Training
  • Audit and certification
  • SOC 2
  • PIPEDA
Focused · Winnipeg, Manitoba

Digital Fort

Winnipeg consultancy offering fractional CISO, SOC 2, ISO 27001 and PCI DSS readiness, risk and maturity assessments, awareness training, and vulnerability and penetration testing.

  • GRC advisory
  • Audit and certification
  • Training
  • Pen testing
  • Vulnerability mgmt
  • SOC 2
Full service · Pointe-Claire, Quebec

EthiSecure Services Inc.

Quebec firm offering audit and compliance, security consulting and advising (architecture, vulnerability assessment, risk analysis, policies, virtual CISO and privacy officer roles) and training and certification.

  • Audit and certification
  • GRC advisory
  • Architecture
  • Vulnerability mgmt
  • Privacy
  • ISO 27001
  • PCI DSS
  • HIPAA
  • SOC 2
Full service · Toronto, Ontario

IRM Consulting & Advisory

Toronto consultancy offering virtual CISO, GRC, AI governance, security architecture, DevSecOps, privacy, penetration testing and awareness training for Canadian and US organizations.

  • GRC advisory
  • Audit and certification
  • Privacy
  • Pen testing
  • AppSec
  • +3
  • SOC 2
  • ISO 27001
  • CMMC
  • CIS Controls
  • GDPR
  • +3
Full service · Vancouver, British Columbia

Kobalt.io

Compliance and security firm offering gap assessments, audit readiness, vCISO, penetration testing and incident response, with a fixed-fee CPCSC programme for defence supply-chain vendors.

  • GRC advisory
  • Audit and certification
  • Pen testing
  • IR and forensics
  • MDR and SOC
  • +1
  • CPCSC
  • CMMC
  • NIST 800-171
  • SOC 2
  • ISO 27001
  • +6
Full service · Laval, Quebec

OKIOK

Offensive security (penetration testing, vulnerability assessment), incident response, digital forensics, cybersecurity consulting, compliance and governance, and identity compliance as a service.

  • Pen testing
  • Vulnerability mgmt
  • IR and forensics
  • GRC advisory
  • IAM
  • +1
  • ISO 27001
  • SOC 2
  • PCI DSS
  • CPCSC
Focused · Ottawa, Ontario

Pilotcore

Cloud and compliance consultancy offering DevSecOps, readiness assessments for CPCSC and CMMC, SOC 2 readiness, zero trust architecture and fractional CTO support.

  • Cloud security
  • GRC advisory
  • Audit and certification
  • Architecture
  • CPCSC
  • CMMC
  • SOC 2
Full service · Vancouver, British Columbia

Plurilock

Cybersecurity services firm covering adversary simulation, cloud and data protection, identity and compliance readiness, including CPCSC and CMMC readiness for defence suppliers.

  • Pen testing
  • Red team
  • Cloud security
  • IAM
  • GRC advisory
  • +2
  • CPCSC
  • CMMC
  • NIST 800-171
  • MITRE ATT&CK
  • OWASP
Full service · Etobicoke, Ontario

PlutoSec

Etobicoke firm covering penetration testing, red team, compliance readiness (ISO 27001, SOC 2, PCI DSS, HIPAA), cloud security, managed SOC/MDR, secure development and incident response.

  • Pen testing
  • Red team
  • GRC advisory
  • Audit and certification
  • Cloud security
  • +3
  • ISO 27001
  • SOC 2
  • PCI DSS
  • NIST CSF
  • ITSG-33
  • +2
Full service · Toronto, Ontario

SAV Associates

Toronto CPA firm and ISO certification body offering SOC 1/2/3 attestation, ISO certification, IT audit, GRC consulting, CMMC and CPCSC readiness, and penetration testing and incident response.

  • Audit and certification
  • GRC advisory
  • Pen testing
  • Vulnerability mgmt
  • IR and forensics
  • SOC 2
  • ISO 27001
  • CMMC
  • CPCSC
Full service · Anjou, Quebec

Secur01

Anjou, Quebec firm offering managed protection and SOC-as-a-service, vulnerability scanning, penetration testing, vCISO, incident response planning, awareness training and Law 25 compliance evaluation; French and English.

  • MDR and SOC
  • Pen testing
  • Vulnerability mgmt
  • GRC advisory
  • Privacy
  • +3
  • Law 25
Full service · Ottawa, Ontario

TwelveDot Incorporated

Ottawa technology and security consulting practice offering virtual CSO, ethical hacking, cloud, mobile and IoT assessments, ISO 27001 implementation and audit, breach mitigation and incident response.

  • GRC advisory
  • Pen testing
  • Cloud security
  • Audit and certification
  • IR and forensics
  • +1
  • ISO 27001
  • OWASP

Related resource hubs

// more

Other services

Listings reflect what each firm says on its own website. Inclusion is not an endorsement. How the directory works.