In March 2025, the president of Quebec company Qualinet chose to speak publicly about the cyberattack that hit his business. It is a rare gesture that deserves credit. Too often, victims stay silent, when their experience could help other leaders prepare.
Silence hurts everyone
When incidents stay hidden, everyone can keep thinking "it only happens to others". Yet according to Statistics Canada, about one in six Canadian businesses was impacted by a cyber security incident in 2023, with fraud and identity theft topping the list of methods.
The false sense of security
We often meet businesses convinced they are well protected because they have:
- several security tools, without knowing who actually reviews the alerts;
- a short awareness video, with no exercise or follow-up;
- a few privacy policies written for compliance, never applied.
These are useful, but not enough. Printers, connected devices, phones, former employees' access, AI use: who really takes care of them? It is nobody's fault. Often, it is a mandate that was never assigned.
Ask for a second opinion
Getting a second opinion on cybersecurity is not a vote of no confidence in your IT provider. It is good governance, like having your financial statements reviewed. An independent perspective helps ask the right questions and check the evidence.
Accessible solutions
Simple, affordable and quick measures close enough doors to discourage most attackers: MFA, tested backups, limited access rights, training, an incident plan.
To take stock without a long engagement, the Cyber & AI Assessment gives you your five priorities in 90 minutes.
Sources: Le Soleil, March 3, 2025; Statistics Canada, 2024.