IT Security & Compliance · Port Coquitlam, BC
IT security is the assessment, governance, and compliance side of cyber risk. Hexafusion delivers risk assessments, security audits, written policy, and readiness work for PIPEDA, BC PIPA, PCI DSS, and SOC 2 across Port Coquitlam. Built around the realities of Mary Hill logistics, family-led light manufacturing, and the Tri-Cities multi-site operators that need one coherent control posture across PoCo, Coquitlam, and Port Moody. Led by a former PCI DSS Internal Security Assessor, the work produces evidence your auditor, cyber insurer, and shipper customers will accept.
Initial Assessment
Documented written report within 10 to 15 business days.
Frameworks Used
NIST CSF 2.0, CIS Critical Security Controls, CCCS Baseline.
Compliance Scope
PIPEDA, BC PIPA, PCI DSS, SOC 2 Type I & II readiness.
Coverage Areas
Mary Hill, Town Centre, Birchland Manor, Lincoln Park, Citadel Heights, Glenwood, Riverwood, plus Tri-Cities multi-site
IT security is the work that produces evidence: written reports, signed policies, completed questionnaires, and tested procedures. It is the part of the security program that auditors, regulators, shippers, and your enterprise customers actually want to see, and it sits underneath every operational control. In PoCo, it is increasingly the gate to winning the next national-shipper contract.
A written report of your current posture against the CIS Critical Security Controls and the Canadian Centre for Cyber Security baseline. Risk register, scored gaps, prioritised remediation, and a phased plan tied to budget and to your 24-hour dispatch reality where applicable.
Targeted audits against a specific framework: PCI DSS, SOC 2, ISO 27001 readiness, or a customer-driven questionnaire from a national shipper or 3PL. We test the controls that exist, document the ones that do not, and rank fixes by effort and effect.
Acceptable Use, Access Control, Incident Response, Data Classification, Vendor Management, Business Continuity. We draft the policies, you adopt them, leadership and family ownership sign them, and they live in a version-controlled repository, not a shared drive folder.
Mapping your data flows, documenting consent and retention, building the breach-notification procedure, and producing the safeguards documentation the Office of the Privacy Commissioner of Canada and the BC OIPC look for in recent breach decisions.
Cardholder-data-environment scoping for Town Centre retail and automotive trades, network segmentation review, vulnerability scanning, and evidence collection led by a former PCI DSS Internal Security Assessor. We work alongside your QSA, not in place of them.
Trust Service Criteria mapping, control design, evidence collection, and auditor liaison. SOC 2 Type I prep typically takes 3 to 6 months; Type II adds 6 to 12 months of operating-effectiveness evidence on top.
Port Coquitlam hosts industries with very different regulatory and customer pressure. A Mary Hill freight forwarder faces shipper questionnaires that gate revenue. A Town Centre dental practice has BC PIPA obligations from day one. We tune the assessment to your reality.
Mary Hill freight forwarders and dispatch operators face supply-chain security questionnaires from US and national shipper customers. We document driver-app access, EDI feeds, and produce the evidence pack.
Mary Hill industrial manufacturers face shop-floor segmentation questions from US customers under CMMC-adjacent supply-chain pressure. We document OT separation and produce the auditor binder.
Medical, dental, and allied-health clinics in Town Centre and along the Coast Meridian corridor carry BC PIPA obligations for health information. We document role-based access, audit logging, and the breach-notification path.
Accounting, legal, and consulting firms near Shaughnessy Street carry PIPEDA obligations and client confidentiality expectations. Ethical walls and information barriers are part of the assessment.
Town Centre retailers and operators adjacent to Coquitlam Centre handling card data fall under PCI DSS. Scoping the cardholder environment is the first lever to reduce audit cost.
Multi-bay shops carry payment and customer-data obligations alongside parts-system integrations. Documentation is the deliverable shops use when an insurer or franchise auditor asks.
Every Port Coquitlam business we onboard receives a documented security baseline aligned to the Canadian Centre for Cyber Security baseline controls and the requirements your cyber insurance carrier is asking about on renewal questionnaires. This is the same baseline we apply to our own infrastructure, not a stripped-down small-business version.
Hexafusion operates as a Dell authorized reseller and full-service IT supplier for Port Coquitlam businesses, with access to authorized Canadian distribution channels for Lenovo, Apple, Microsoft Surface, and networking gear from Cisco Meraki, Fortinet, SonicWall, Ubiquiti, Aruba, and Juniper. Secure procurement is part of the security program, not a sales transaction. Every laptop, dispatch terminal, and in-cab tablet arrives at the user pre-imaged with the security baseline above, enrolled in Microsoft Autopilot, and ready to power on.
At end-of-life we handle decommissioning to a standard your auditor will accept. Drive sanitisation follows NIST Special Publication 800-88 guidelines (cryptographic erasure for SSDs, multi-pass wipe for spinning drives), every retired device generates a serial-numbered certificate of destruction for your PIPEDA breach-notification record-keeping, and devices beyond economic refurbishment are recycled through programs accredited by the Electronic Products Recycling Association (EPRA Canada).
Hexafusion is led by founder Alex Barari, a former PCI DSS Internal Security Assessor (ISA) with 15+ years in enterprise IT and cybersecurity. Risk assessments and compliance engagements are led by people who have sat on both sides of an audit. We do not subcontract policy work to a template generator. Every Port Coquitlam client gets an assessment written for their environment, signed off by leadership who can answer the broker, shipper, or auditor follow-up questions.
Our quarterly business review (QBR) is a real strategic report, not a generic newsletter: engagement health score, financial recap, onboarding progress, renewal calendar, and an AI-summarised executive paragraph delivered as a PDF to every client at the end of every calendar quarter. See the QBR page for a worked example.
We also serve: See all service areas →
Tell us about your environment, your regulatory or shipper exposure, and what is driving the timing. We respond within one business day with a scoped quote and timeline.
Assessment delivery times are targets and depend on the speed of data collection from your team and any third-party vendors. Policy templates are starting points; final adoption requires leadership review and sign-off. Statement-of-controls timing aligns with your cyber-insurance renewal date. Tabletop exercises are documented and stored in your governance repository for auditor and regulator review.
Sibling Port Coquitlam pages and deep-dive cluster pages on assessment, governance, and compliance topics referenced above.
