(888) 652-3358Book an Assessment

See threats earlier and respond with a plan.

Endpoint detection, monitored logs, hardened identities, tested email controls and staff who recognise phishing. Santre builds the controls insurers and auditors ask about and watches them every day.

Discuss a Cybersecurity Assessment
See What's Included

A review of identities, endpoints, email and backups with a prioritized fix list.

Overview

Cybersecurity & Compliance

Santre's cybersecurity service protects Canadian businesses with managed detection and response (EDR/MDR), security monitoring through a SIEM, vulnerability management, identity and email protection, incident response planning and security awareness training. It suits organizations that need stronger controls than antivirus and a firewall, have cyber-insurance questionnaires to answer, or handle personal information covered by Canadian privacy law. Santre delivers it as an ongoing managed service, as a one-time assessment, or alongside an internal IT team.

Who it is for

  • Businesses renewing or applying for cyber insurance
  • Organizations holding client, patient or financial records
  • Internal IT teams that need monitoring and response coverage
  • Companies answering security questionnaires from larger customers

What’s included

Controls that cover the ways attacks actually start.

Detection and response

Every endpoint and server reports suspicious behaviour to analysts who can isolate a device before an incident spreads.

  • Managed EDR, XDR and MDR
  • Managed SOC and SIEM log monitoring
  • Threat hunting and alert triage
  • Incident response planning and retainers
How it works

Detection is tuned to the environment: Microsoft 365 sign-in logs, firewall events and endpoint telemetry are correlated so an impossible-travel login and a new mailbox forwarding rule are treated as one incident, not two unrelated alerts.

Identity and email protection

Most breaches begin with a stolen password or a convincing email. These controls close those doors first.

  • Phishing-resistant MFA and Conditional Access
  • Privileged access separation
  • SPF, DKIM and DMARC enforcement
  • Advanced email filtering and impersonation protection
How it works

Conditional Access policies are staged in report-only mode before enforcement, so legacy authentication and shared mailboxes are found and fixed without locking people out.

Assess and harden

Find the weaknesses before someone else does, then fix them in order of risk rather than order of discovery.

  • Vulnerability scanning and patch verification
  • External and internal penetration testing
  • Microsoft 365 security baseline reviews
  • Zero Trust roadmap and network segmentation

Readiness and people

Prepare the evidence, the plan and the people that an insurer, auditor or incident will test.

  • Cyber-insurance questionnaire readiness
  • Security awareness training and phishing simulations
  • Incident response and breach-notification playbooks
  • Alignment to the Canadian Centre for Cyber Security baseline controls
How it works

Canadian cyber insurers commonly ask about MFA, endpoint detection, offline or immutable backups, email authentication and a written incident response plan. Santre documents each control so questionnaire answers can be supported if a claim is reviewed.

When to consider it

Signs it is time to act

  • Your insurer has sent a security questionnaire you cannot answer confidently
  • MFA is enabled for some accounts but not all, or not for administrators
  • No one reviews security alerts outside business hours
  • A customer or partner has asked for evidence of your security controls
  • You have had a phishing incident, invoice fraud or a compromised mailbox
  • You are unsure what you would do in the first hour of a ransomware attack

How Santre delivers it

A clear process from first review to ongoing care

  1. Assess

    Review identities, endpoints, email, backups and network exposure against a recognised control baseline.

  2. Prioritize

    Rank findings by likelihood and impact, and agree a remediation order and budget.

  3. Harden

    Deploy and tune detection, identity and email controls with change windows that suit the business.

  4. Monitor and rehearse

    Watch alerts continuously, report monthly and run incident tabletop exercises.

Scope

Technologies and boundaries

Platforms commonly in scope

  • Microsoft Defender and Entra ID
  • EDR / XDR platforms
  • SIEM and log management
  • Email security gateways
  • Vulnerability scanners
  • Phishing simulation platforms

Where this service ends

Day-to-day device patching and user support sit with Managed IT; this service owns detection, response, hardening and security evidence. Recovery from backup is covered by Backup & Disaster Recovery.

Related services

Services that work alongside this one

View all 13 Santre services

Frequently asked questions

Questions about Cybersecurity

Antivirus blocks known malicious files. EDR records behaviour on each device so unusual activity, such as a script encrypting files, can be detected and the device isolated. MDR adds people: analysts who review those detections and respond, including outside business hours.

Santre can implement and document the controls insurers commonly ask about — MFA, endpoint detection, backups, email authentication and incident response planning — and help you answer the questionnaire accurately. The insurer makes the underwriting decision.

Under PIPEDA, organizations must report breaches that create a real risk of significant harm to the Office of the Privacy Commissioner and notify affected individuals, and keep a record of every breach for 24 months. Some provinces and sectors have additional rules. Santre's incident playbooks include these notification steps; legal advice should come from your counsel.

Yes. A cybersecurity assessment gives you a prioritized list of findings you can act on with Santre, your internal team or another provider.

Find out where your security stands.

A review of identities, endpoints, email and backups with a prioritized fix list.

Discuss a Cybersecurity Assessment

Prefer to talk first? Call (888) 652-3358.