TRA for Ottawa founders and operators. A TRA is what a government buyer, a prime contractor, or an enterprise vendor-risk team asks for when they want proof you have assessed your risk and can show your work. We test the environment first, with our offensive-security partner, then write the assessment, so every risk rating traces back to something we actually found instead of a template with your logo on it.
Ottawa is federal-sector tech, defence, and a long-standing cybersecurity ecosystem. The buyers are different from Toronto: longer cycles, more compliance, and ITSG-33 / Protected B / OSFI on every checklist.
Public sector and FRFI work runs through Ottawa. We carry the cybersecurity vocabulary required to talk to TBS, CCCS, and OSFI staff, and to vendors selling into them.
A TRA is what a government buyer, a prime contractor, or an enterprise vendor-risk team asks for when they want proof you have assessed your risk and can show your work. We test the environment first, with our offensive-security partner, then write the assessment, so every risk rating traces back to something we actually found instead of a template with your logo on it.
For the full service detail, see the Threat and Risk Assessment page. For fixed-price productized engagements, see pricing.
Book a free 30-minute discovery call. We’ll tell you whether this engagement fits, what it would cost, and when we could start.
Book a call