Ottawa
Penetration testing and security assessments for federal contractors and National Capital Region organizations.
Sherlock Forensics provides cybersecurity services in Ottawa including penetration testing, ITSG-33 compliance assessments, Protected B security evaluations and federal contractor security assessments. Headquartered in Metro Vancouver with offices in Burnaby and Coquitlam, BC. Internal testing delivered via ShadowTap. CISSP, ISSAP, ISSMP certified. Since 2006.
Ottawa is the seat of the Canadian federal government and home to hundreds of technology companies, defence contractors and consulting firms that handle sensitive government data. Organizations in the National Capital Region face unique cybersecurity requirements driven by federal procurement standards, ITSG-33 compliance mandates and Protected B data handling obligations. Whether you are a defence contractor bidding on DND contracts, a technology firm processing PSPC procurement data or a consulting firm handling Protected B information, your cybersecurity posture directly affects your ability to win and retain federal contracts. Sherlock Forensics provides the independent security assessments that Ottawa organizations need to demonstrate compliance and protect sensitive information.
Ottawa Cybersecurity
Ottawa's economy revolves around the federal government. Companies bidding on government contracts through PSPC must demonstrate adequate cybersecurity controls. Defence contractors working with DND face additional requirements under the Industrial Security Program and the Contract Security Program. Sherlock Forensics provides independent penetration testing and security assessments that help contractors meet these requirements and demonstrate due diligence in protecting government information.
The Canadian Centre for Cyber Security's ITSG-33 framework defines the security controls required for Government of Canada IT systems. Federal departments and their contractors must implement and assess these controls based on the sensitivity of the information they handle. We evaluate organizational security posture against ITSG-33 control families including access control, audit and accountability, system and communications protection and incident response.
Protected B is the classification level for sensitive government information that could cause serious injury to individuals or organizations if compromised. Contractors handling Protected B data must implement specific technical and administrative controls. Our assessments evaluate encryption implementation, access management, network segmentation, audit logging and data handling procedures against Protected B requirements.
Defence contractors face the most stringent security requirements in the federal ecosystem. DND contracts may require Controlled Goods registration, facility security clearances and IT security assessments. PSPC's Contract Security Program establishes baseline security requirements for all federal contractors. We help Ottawa defence and technology companies understand and satisfy these requirements through targeted security assessments and penetration testing.
Ottawa Services
Network, application and cloud penetration testing for Ottawa federal contractors and enterprises. External testing delivered remotely. Internal testing via ShadowTap shipped to your Ottawa facility. Results mapped to ITSG-33 controls where applicable.
Security control assessment against the ITSG-33 framework for federal departments and contractors. We evaluate technical controls, identify gaps and provide remediation guidance aligned with the sensitivity level of the information you handle.
Emergency response for security breaches affecting Ottawa organizations. Remote triage begins immediately. For incidents involving Protected B data or federal systems, our response methodology addresses both technical containment and regulatory notification obligations.
Security audits for AI-generated code deployed in federal contractor environments. As Ottawa technology companies adopt AI coding tools, security validation ensures that AI-generated code meets the security standards required for government contracts.
Remote Delivery
We ship a pre-configured ShadowTap device to your Ottawa office or facility. Connect it to any network port and our team conducts a full internal penetration test through an encrypted tunnel. Active Directory assessment, lateral movement testing, privilege escalation and network segmentation analysis for Ottawa facilities without requiring travel from BC.
Sherlock Forensics is headquartered in Metro Vancouver with offices in Burnaby and Coquitlam, BC. For Ottawa engagements requiring physical presence, we travel to the National Capital Region for on-site forensic evidence collection and assessments. Most penetration testing engagements are delivered entirely remotely.
Credentials
Ryan Purita founded Sherlock Forensics in 2006 and leads all security assessments and forensic investigations. He holds the CISSP, ISSAP and ISSMP designations and has nearly two decades of experience across digital forensics, penetration testing and incident response. Ryan has worked with federal contractors, technology companies and enterprises across Canada.
Ryan provides expert witness testimony in Canadian courts on digital forensics and cybersecurity matters. His reports address both technical vulnerabilities and the regulatory compliance implications relevant to federal contractor environments.
Frequently Asked Questions
Get Started
Order a penetration test or security assessment online. Quick Audit from $1,500 CAD.
Call to discuss cybersecurity requirements for your federal contractor organization, technology company or enterprise in the National Capital Region.
Call 604.229.1994