Sameer Malik is the Founder and Managing Director of Brigient, a boutique cybersecurity advisory firm based in Mississauga, Ontario. With over 20 years of experience in cybersecurity, governance, risk management, and IT strategy, Sameer has led more than 300 incident and ransomware response engagements for organizations across Canada. He holds a BA from the University of Toronto and is certified in TOGAF® 9 (The Open Group Architecture Framework) and ITIL (IT Infrastructure Library). Sameer's approach to cybersecurity is built on four pillars: Identify, Respond, Recover, and Govern.
Insider Threats: How to Detect and Prevent Them in Your Organization Your most significant cybersecurity risk may already have authorized access to your systems. Insider threats — incidents caused by employees, contractors, former staff, or trusted partners who misuse their access — account for a substantial share of cybersecurity incidents in Canadian organizations. Unlike external… Continue reading Insider Threats: How to Detect and Prevent Them in Your Organization
SOC 2 vs. ISO 27001: Which Certification Do Canadian Companies Actually Need? If your organization is evaluating security certifications, you have almost certainly encountered both SOC 2 and ISO 27001. Both are widely recognized, both signal security maturity to clients and partners, and both require significant investment to achieve. They are not interchangeable. The question… Continue reading SOC 2 vs. ISO 27001: Which Certification Do Canadian Companies Actually Need?
Bill C-8 and the Critical Cyber Systems Protection Act: What Canadian Businesses Need to Know Canada’s cybersecurity obligations just changed. On March 26, 2026, Bill C-8, the Critical Cyber Systems Protection Act (CCSPA), passed the House of Commons. It is now before the Senate, and when it receives Royal Assent, organizations across six regulated sectors… Continue reading Bill C-8 and the Critical Cyber Systems Protection Act: What Canadian Businesses Need to Know
The End of the Security Equilibrium: What AI-Powered Cyberattacks Mean for Canadian Businesses The tools your organization uses to stay secure were built for a different threat environment. For roughly two decades, the cybersecurity industry operated in a relatively stable equilibrium: attacks grew more sophisticated, but defenses adapted, and the overall structure of the threat… Continue reading The End of the Security Equilibrium: What AI-Powered Cyberattacks Mean for Canadian Businesses
SOC 2 Compliance for Canadian Tech Companies: What You Need to Know A few years ago, Canadian SaaS companies could win enterprise and US-market deals on product merit alone. That window is closing fast. Procurement teams at mid-market and enterprise buyers now routinely include a SOC 2 report in their vendor security questionnaires, and without… Continue reading SOC 2 Compliance for Canadian Tech Companies: What You Need to Know
OSFI Guideline B-13: What Canadian Financial Institutions Need to Know About Technology and Cyber Risk If you lead a compliance, IT, or risk function at a federally regulated financial institution in Canada, OSFI Guideline B-13 is not a future concern. It came into effect on January 1, 2024, and OSFI’s supervisory expectations are active now.… Continue reading OSFI Guideline B-13: What Canadian Financial Institutions Need to Know About Technology and Cyber Risk
Ransomware Protection for Canadian Small Businesses: A Practical Guide Ransomware is no longer a threat reserved for large enterprises. Attackers have shifted their focus toward small and mid-sized businesses, and Canadian organizations are directly in their sights. According to the Canadian Centre for Cyber Security, ransomware remains one of the top threats facing Canadian organizations… Continue reading Ransomware Protection for Canadian Small Businesses: A Practical Guide
Cybersecurity Insurance for Canadian SMBs: What Coverage Actually Covers (And What It Doesn’t) Cyber insurance has become a common recommendation in risk management conversations, and for good reason. A single ransomware attack or data breach can cost a small Canadian business tens of thousands of dollars in recovery, legal fees, and regulatory fines. Insurance helps… Continue reading Cybersecurity Insurance for Canadian SMBs: What Coverage Actually Covers (And What It Doesn’t)
Zero Trust Security: What Canadian Businesses Need to Know and How to Get Started For years, the dominant model of network security was built on a simple idea: trust what is inside the perimeter, verify what comes from outside. Once a user or device crossed the firewall, they were largely free to move around. That… Continue reading Zero Trust Security: What Canadian Businesses Need to Know and How to Get Started
What a Data Breach Response Plan Should Include for a Small Business in Canada Most small businesses in Canada have some version of IT security in place: antivirus software, a firewall, maybe multi-factor authentication on email. What most do not have is a written, tested plan for what happens after a breach. That gap is… Continue reading What a Data Breach Response Plan Should Include for a Small Business in Canada
Let’s Talk About Your Project: Unleash Possibilities, Explore Solutions, and Forge a Brighter Digital Future Together.
Contact Us Today!
