Our services
Two ways to work with us
SIRIS, our complete solution for SMBs, and RISS Canada consulting for large organizations.
Cyber diagnostic
A first online assessment of your exposure: access, backups, email, awareness. You leave with your priorities.
Take the diagnostic →
Audit
The real state of your environment, its risks and the order in which to act. A penetration test can complement it.
See the audit →
Foundation
Bringing your environment up to standard and into compliance, then installing the management and security tools.
See the foundation →
Managed services
Ongoing monitoring, maintenance and protection of your devices, standard incident response included.
See managed services →
Training
Cybersecurity and phishing awareness, Law 25, use of AI: teams that know how to recognise a threat.
See the training →
Beyond SMBs, RISS Canada works in architecture and engineering (network, cybersecurity, cloud, automation) for large organizations in banking, the public sector, industry and insurance, on environments where downtime is not an option.
We run projects end to end, from audit to operations, and we provide certified practitioners who join your teams for the length of an engagement.
Frequently asked questions
What does a cybersecurity engagement cost?
For SMBs, SIRIS publishes its starting prices: the audit, the foundation, then managed services billed per device. For a project or a one-off engagement, the price follows the scope: number of users and sites, what your licences already cover, applicable regulatory obligations, the real cost of an hour of downtime, and your clients’ and insurer’s requirements. Two organizations of the same headcount receive very different proposals for those reasons.
Do we have to do everything at once?
No, and trying is the surest way to finish nothing. The sequence we recommend is ordered: assess, fix the foundations, then validate with a technical exercise. Many organizations progress across several budget cycles, handling each year whatever reduces the most risk for the funds available. A staged plan that is actually followed beats an ambitious programme abandoned in the first quarter.
Can we start with an assessment only, with no follow-on?
Yes. The initial assessment is free, carries no commitment, and the written summary of your principal exposure stays yours even if you do not proceed. That is a deliberate position: an organization that leaves with a clear view of its risks and decides to handle them itself has still gained something, and we prefer that to an engagement sold before it was understood.
Do you work across Quebec?
Yes. We are based in Montérégie and work in Greater Montreal and throughout Quebec, on site and remotely. Technical reviews and most governance work are done remotely; physical infrastructure surveys, wireless coverage studies and awareness workshops happen on site. For Europe, our engagements are run with our partner RISS Consulting in France.
What if we have an incident in progress?
Say so explicitly in your message or by phone: those requests go ahead of everything else. The first hours determine a great deal, and decisions taken under pressure without a written procedure are often the ones people regret. If you have no support in place, two immediate reflexes: do not power off the affected machines, which destroys useful evidence, and write down the time and nature of what you observe.
Is your infrastructure ready for the next threat?
A discovery call, without commitment, to understand your reality before recommending anything.