Insights

Perspectives on cybersecurity risk, governance, and strategy.

Thought leadership and practical guidance from the Secured Intelligence advisory team — written for executives, boards, and security leaders in Canadian regulated industries.

Featured

Regulatory8 min read

Understanding OSFI B-13: What Financial Institutions Need to Know

OSFI's Technology and Cyber Risk Management guideline (B-13) sets a new baseline for how federally regulated financial institutions must govern technology and cyber risk. We break down the key expectations and what they mean for your security program.

Request the full article→
Advisory

The Case for Independent Cybersecurity Advisory

When your security advisor has products to sell, their recommendations are never truly objective. Here is why independence matters — and what to look for in a trusted advisor.

5 min read
Request article →
Risk Management

Third-Party Risk Management: Beyond the Questionnaire

Most organizations rely on vendor questionnaires as their primary third-party risk control. It is not enough. A mature TPRM program requires continuous oversight, tiered risk assessment, and clear escalation paths.

6 min read
Request article →
Governance

Cybersecurity Governance for Boards: Five Questions Every Director Should Ask

Board members do not need to be cybersecurity experts — but they do need to ask the right questions. These five questions will help your board provide meaningful oversight of your organization's cyber risk.

5 min read
Request article →
Emerging Technology

AI Security Governance: What Organizations Need to Consider Now

The rapid adoption of AI tools across Canadian organizations is outpacing security governance. Before your teams embed AI into critical workflows, here is what your security program needs to address.

7 min read
Request article →
Risk Management

Cyber Insurance and the Security Controls That Actually Matter

Cyber insurers are tightening requirements and scrutinizing controls more carefully than ever. Understanding what underwriters are looking for can help you prioritize your security investments — and reduce your premiums.

6 min read
Request article →
Strategy

Building a Security Program for a Mid-Market Organization

Mid-market organizations face enterprise-level threats without enterprise-level resources. A practical guide to building a right-sized security program that addresses real risks without unnecessary complexity.

8 min read
Request article →

Stay informed on cybersecurity risk and governance.

New insights published regularly. In the meantime, speak with an advisor about your organization's specific challenges.