Security Risk Assessment
A written report of your current posture against the CIS Critical Security Controls and the Canadian Centre for Cyber Security baseline. Risk register, scored gaps, prioritised remediation, and a phased plan tied to budget.
IT Security & Compliance · Coquitlam, BC
IT Security for Coquitlam Businesses
IT security is the assessment, governance, and compliance side of cyber risk. Hexafusion delivers risk assessments, security audits, written policy, and readiness work for PIPEDA, BC PIPA, PCI DSS, and SOC 2 for Coquitlam and Tri-Cities clients. Led by a former PCI DSS Internal Security Assessor, the work produces evidence your auditor, your cyber insurer, and your enterprise customers will accept, whether your office sits in Town Centre, Burquitlam, Maillardville, or near Eagle Ridge Hospital.
Hexafusion at a glance for Coquitlam businesses. Vancouver-based since 2020 · downtown office at 997 Seymour Street · founder is a former PCI DSS Internal Security Assessor (ISA) · Microsoft Solutions Partner · written risk assessments mapped to CIS Controls and NIST CSF 2.0 · PIPEDA and BC PIPA breach-procedure documentation included · flat-rate managed plans.
Initial Assessment
Documented written report within 10 to 15 business days.
Frameworks Used
NIST CSF 2.0, CIS Critical Security Controls, CCCS Baseline.
Compliance Scope
PIPEDA, BC PIPA, PCI DSS, SOC 2 Type I & II readiness.
Coverage Areas
Town Centre, Burquitlam, Maillardville, Westwood Plateau, Austin Heights, Eagle Ridge, Coquitlam West
What IT Security Means in Coquitlam
IT security is the work that produces evidence: written reports, signed policies, completed questionnaires, and tested procedures. It is the part of the security program that auditors, regulators, and your enterprise customers actually want to see, and it sits underneath every operational control in your Coquitlam environment.
Security Audit and Gap Analysis
Targeted audits against a specific framework: PCI DSS, SOC 2, ISO 27001 readiness, or a customer-driven questionnaire. We test the controls that exist, document the ones that do not, and rank fixes by effort and effect.
Policy and Governance
Acceptable Use, Access Control, Incident Response, Data Classification, Vendor Management, Business Continuity. We draft the policies, you adopt them, leadership signs them, and they live in a version-controlled repository, not a shared drive folder.
PIPEDA & BC PIPA Readiness
Mapping your data flows, documenting consent and retention, building the breach-notification procedure, and producing the safeguards documentation the Office of the Privacy Commissioner of Canada and the BC OIPC look for in recent breach decisions.
PCI DSS Scoping & Prep
Cardholder-data-environment scoping, network segmentation review, vulnerability scanning, and evidence collection led by a former PCI DSS Internal Security Assessor. Built for Coquitlam Centre retailers and Town Centre service businesses that take card payments.
SOC 2 Readiness
Trust Service Criteria mapping, control design, evidence collection, and auditor liaison. SOC 2 Type I prep typically takes 3 to 6 months; Type II adds 6 to 12 months of operating-effectiveness evidence on top.
Industries with Specific Security Obligations in Coquitlam
Coquitlam hosts industries with very different regulatory pressure. A clinic near Eagle Ridge Hospital has BC PIPA obligations from day one. A Town Centre SaaS startup will see SOC 2 questionnaires from its first enterprise prospect. We tune the assessment to your reality across the Tri-Cities.
Healthcare and Clinics
Clinics in the Eagle Ridge Hospital corridor, Austin Heights medical strip, and Town Centre medical towers have BC PIPA obligations for health information. We document role-based access, audit logging, and the breach-notification path.
Professional Services
Accounting, legal, architecture, and consulting firms in the Town Centre towers near Lafarge Lake carry PIPEDA obligations and client confidentiality expectations. Ethical walls and information barriers are part of the assessment.
Light Manufacturing and Industrial
Maillardville and Coquitlam West manufacturers face supply-chain security questionnaires from US customers. We document OT segmentation and produce the evidence pack.
Retail and Mall Tenants
Retail operators at Coquitlam Centre and along the North Road and Lougheed Highway corridors handling card data fall under PCI DSS. Scoping the environment is the first lever to reduce audit cost.
Construction and Trades
Tri-Cities construction firms working on Burquitlam towers and the future Riverview Lands redevelopment face increasing client security questionnaires and subcontractor risk reviews. We deliver the evidence pack.
Education-Adjacent Organisations
Training providers and tutoring services near Douglas College David Lam Campus and Coquitlam College often hold student data with FIPPA implications. Documentation is the deliverable.
Compliance-Ready IT Baseline for Coquitlam Businesses
Every Coquitlam business we onboard receives a documented security baseline aligned to the Canadian Centre for Cyber Security baseline controls and the requirements your cyber insurance carrier is asking about on renewal questionnaires. This is the same baseline we apply to our own infrastructure, not a stripped-down small-business version.
- Identity and access. Microsoft Entra ID with Conditional Access policies, multi-factor authentication (MFA) enforcement on every account, and compliant-device sign-in checks.
- Endpoint protection. Endpoint Detection and Response (EDR) on every Windows, Mac, and mobile device, deployed and active before the user receives the laptop.
- Disk encryption. BitLocker on Windows and FileVault on Mac, key-escrowed centrally so a lost device does not become a data breach.
- Email hardening. SPF, DKIM, and DMARC alignment plus anti-phishing and impersonation-protection rules tuned to your industry.
- Backup and recovery. Managed backups with documented retention and quarterly restore tests so you know recovery actually works before an incident.
- BC PIPA and PIPEDA aware. Audit logging, role-based access, and breach-notification process documentation kept up to date with the current Office of the Privacy Commissioner of Canada guidance.
Hardware Lifecycle and Secure Disposal in Coquitlam
Hexafusion operates as a Dell authorized reseller and full-service IT supplier for Coquitlam businesses, with access to authorized Canadian distribution channels for Lenovo, Apple, Microsoft Surface, and networking gear from Cisco Meraki, Fortinet, SonicWall, Ubiquiti, Aruba, and Juniper. Secure procurement is part of the security program, not a sales transaction. Every laptop arrives at the user pre-imaged with the security baseline above, enrolled in Microsoft Autopilot, and ready to power on.
At end-of-life we handle decommissioning to a standard your auditor will accept. Drive sanitisation follows NIST Special Publication 800-88 guidelines (cryptographic erasure for SSDs, multi-pass wipe for spinning drives), every retired device generates a serial-numbered certificate of destruction for your PIPEDA breach-notification record-keeping, and devices beyond economic refurbishment are recycled through programs accredited by the Electronic Products Recycling Association (EPRA Canada).
Who you actually work with in Coquitlam
Hexafusion is led by founder Alex Barari, a former PCI DSS Internal Security Assessor (ISA) with 15+ years in enterprise IT and cybersecurity. Risk assessments and compliance engagements for Coquitlam clients are led by people who have sat on both sides of an audit. We do not subcontract policy work to a template generator. Every assessment is written for your environment and signed off by leadership who can answer follow-up questions.
Our quarterly business review (QBR) is a real strategic report, not a generic newsletter: engagement health score, financial recap, onboarding progress, renewal calendar, and an AI-summarised executive paragraph delivered as a PDF to every client at the end of every calendar quarter. See the QBR page for a worked example.
Why Coquitlam businesses choose Hexafusion for IT security
- Former ISA at the table. Risk assessments led by someone who has been a PCI DSS Internal Security Assessor, not a generalist with a checklist.
- Framework-agnostic. We map your controls to CIS, NIST CSF 2.0, PIPEDA, BC PIPA, PCI DSS, and SOC 2 in one engagement, not five.
- Audit-ready evidence. Every control has a documented owner, a documented test, and a documented artefact. Your auditor sees a binder, not a scramble.
- Underwriter-ready statement. A renewal-ready statement of controls every year, written in the language cyber insurers use.
- Tri-Cities scope. One assessment covers Coquitlam, Port Coquitlam, and Port Moody sites under one engagement.
- Operations partner if you want one. The same team can run the operational cybersecurity afterwards, on the same flat-rate plan.
We also serve: See all service areas →
Request a security assessment for your Coquitlam business
Tell us about your environment, your regulatory exposure, and what is driving the timing. We respond within one business day with a scoped quote and timeline.
Assessment and reporting commitments for Coquitlam
Risk assessment delivery
10 to 15 business days
From data-collection complete to written report with risk register, gap analysis, and phased remediation plan.
Policy package
Within 30 days
Core policies (AUP, Access Control, IR, Data Classification, Vendor) drafted for leadership review and adoption.
Annual statement of controls
Renewal ready
Audit-quality statement of controls delivered before cyber-insurance renewal, mapped to the standard underwriter questionnaire.
Breach-procedure tabletop
Every quarter
Documented tabletop exercise of the PIPEDA / BC PIPA breach-notification process, with written minutes for auditors.
Assessment delivery times are targets and depend on the speed of data collection from your team and any third-party vendors. Policy templates are starting points; final adoption requires leadership review and sign-off. Statement-of-controls timing aligns with your cyber-insurance renewal date. Tabletop exercises are documented and stored in your governance repository for auditor and regulator review.
Related Hexafusion resources
Sibling Coquitlam pages and deep-dive cluster pages on assessment, governance, and compliance topics referenced above.
