Your cyber insurer asks precise questions before covering you: authentication, backups, remote access, incident response. Our report answers them with evidence, control by control, and the MPJM certificate attests that the recommended fixes have been made.
-
Ten controls
cyber insurers check
-
A written report
with evidence, control by control
-
The MPJM certificate
attests that the recommended fixes have been made
What you get
After the free network analysis, you receive a written report organised around the ten controls cyber insurers check. For each one: what we found, our verdict, and what needs fixing.
The ten controls
- Multi-factor authentication on email, remote access, VPN and administrator accounts.
- Modern endpoint protection (EDR) on every device, not a traditional antivirus.
- Offline or immutable backups, with restores tested and documented. Cloud sync does not count.
- Email filtering and recurring phishing simulations.
- Critical patches applied within 7 to 15 days, with documented timelines.
- Hardened remote access: no exposed remote desktop, a VPN or Zero Trust access with multi-factor authentication.
- Separate administrator accounts and a credential vault.
- A written incident response plan, tested in a simulation within the last 12 months.
- Centralised logging, reviewed regularly.
- A vendor inventory and security reviews.
The MPJM certificate
If you work with MPJM and apply the recommendations and changes in the report, we give you a security certificate approved by MPJM.
And your insurance
MPJM does not set insurance premiums, and will never promise you they go down. What the report and the certificate give you is a way to answer your insurer with evidence rather than ticked boxes. The terms it then offers you remain its decision.
Law 25
Quebec’s Law 25 requires businesses to keep a register of confidentiality incidents and to act when an incident occurs. The incident response plan and logging are among the ten controls: the same analysis serves both.
Who it is for
The analysis is offered to businesses with 10 or more workstations. It takes about fifteen hours of work: we carry out two a month, in the order eligible requests arrive.
Frequently asked questions
What about my insurance?
MPJM does not set insurance premiums, and will never promise you they go down. What the report and the certificate give you is a way to answer your insurer with evidence rather than ticked boxes.
How do I get the certificate?
If you work with MPJM and apply the recommendations and changes in the report, we give you a security certificate approved by MPJM.
What does the report check?
The ten controls cyber insurers check. For each one: what we found, our verdict, and what needs fixing.
Does it help with Law 25?
The incident response plan and logging are among the ten controls: the same analysis serves both.
Where do I start?
The analysis is offered to businesses with 10 or more workstations.
Why MPJM
-
Our offices are at 3235 Avenue de la Gare.
-
5.0 on Google.
Our clients give us a perfect rating, across 23 reviews.
-
Award-winning in cloud computing.
Jonathan Muryn is a silver medallist at the 2022 Skills Canada National Competition, in Cloud Computing.
-
Award-winning in network management.
Our founder, Jonathan Muryn, is a bronze medallist at the 2018 Skills Canada National Competition, in IT network systems administration.
-
Recognised partners.
MPJM is a partner of Fortinet, Cisco, Aruba (HPE), Veeam, Dell, Zscaler, Palo Alto Networks and Qumulo.
-
In French and English.
We serve our clients in both languages.
Request the analysis
Write to us with your company’s name, the number of workstations, and what worries you right now. We confirm whether your request is eligible and when the analysis can start.
Sixteen questions, eight domains, a clear picture of your strengths and blind spots.