About CSMIC

Our team combines hands-on consulting and audit work with more than a decade of teaching cybersecurity at Ontario colleges, so we explain complex topics clearly and transfer knowledge to your staff.

We design security programs that stand up to real threats. Meeting standards such as ISO/IEC 27001 and NERC CIP follows from good architecture, not paperwork.

We are a Canadian, vendor-independent firm. Our recommendations are based on your risk, not on product sales.

More than 20 years of cybersecurity experience, including leadership roles at a Big Four consulting firm.

Energy and utilities, banking and capital markets, healthcare, legal and the public sector.

PKI and two-factor authentication programs for banks and governments, security architecture for capital-markets modernization, application hardening for PCI-DSS and SOX, and critical-infrastructure security and compliance.