Among the principals lessons to be learned from the Target
security breach post mortem, is that an
organisation should include an assessment of third party
service providers information security posture in the course of
their due diligence efforts, stipulate contractual security
requirements and audit compliance therewith in the course of
performance of the agreement. There is no good reason why we should
be aware of Fazio Mechanical Services...1
Assessing the adequacy, sufficiency and robustness of security
measures and controls can require significant efforts and
resources, which is why organisations seek to benefit from
certifications and third party audit reports.
A recent initiative of the federal government will provide a new
alternative to businesses on both side of the
client/service-provider relationship. Launched on August 12, 2019,
CyberSecure Canada is a federal cyber security
certification program (the "Program")
administered by Innovation, Science
