Cybersecurity and compliance for Québec businesses and organizations
We protect your data, secure your Microsoft environment and get you Law 25 compliant, with a Microsoft-certified team who knows your obligations.
Law 25 readiness assessment
A clear view of your gaps and a prioritized action plan in 10 business days.
- Person in charge of personal information designated
- Inventory and incident register
- Privacy impact assessment (PIA)
- Microsoft 365 / Purview controls
- Microsoft-certified team
- Founded in 2022
- Service in French and English
An approach built for your reality
Choose your profile: every sector has its own obligations, risks and frameworks.
SMBs
Solid security without an in-house IT team.
- Turnkey Law 25 compliance
- Microsoft 365 and Intune hardening
- Azure cost reduction (FinOps)
Financial institutions
Governance and controls aligned with your regulators.
- AMF cybersecurity guideline
- OSFI B-13 (technology risk)
- Third-party risk management
Public sector
Engagements that meet government requirements.
- MCN directives
- Secure cloud and governance
From assessment to secure operations
Cybersecurity assessment
Maturity assessment, configuration testing, prioritized report for leadership.
Law 25 compliance
Assessment, policies, PIAs, incident register and support for the person in charge.
Microsoft 365 & Defender security
Defender XDR, Entra ID, conditional access, Purview and Intune.
Azure architecture, migration & governance
Secure landing zones, cloud migration, Canadian data residency.
FinOps & cost optimization
Visibility, governance and lasting reduction of your cloud bill.
vCISO & governance
Part-time security lead, roadmap and board reporting.
Our work is grounded in recognized frameworks
- Law 25Personal information
- AMFCyber guideline
- OSFI B-13Technology risk
- MCNGovernment directives
- NIST CSF 2.0Cybersecurity framework
Verifiable skills
Groupe Conseil GRD holds the following Microsoft certifications.
Microsoft Certified: Cybersecurity Architect Expert
Microsoft Certified: Azure Solutions Architect Expert
Microsoft 365 Certified: Administrator Expert
Microsoft Certified: Azure Security Engineer Associate
Microsoft 365 Certified: Teams Administrator Associate
Microsoft Certified: Azure Administrator Associate
Team able to meet the security requirements of federal contracts
Concrete results
Strengthening Microsoft 365 security and data protection for a Québec public organization
A Québec public-sector organization · 10-month engagement delivered by GRD
Challenge: Protect sensitive data in Microsoft 365 and Azure and ensure compliant deployments using a Zero Trust approach.
- ResultMicrosoft Defender XDR protection configured, Purview DLP policies and sensitivity labels in place, devices managed and hardened, Microsoft 365 environment aligned with Zero Trust principles.
Solid, compliant and well-documented Microsoft security, delivered by a Microsoft-certified team.
Founded in 2022, Groupe Conseil GRD is a Quebec firm specializing in cybersecurity, compliance and Microsoft cloud security. Its team has more than 15 years of IT experience, on engagements for financial institutions, Quebec public bodies and private companies. GRD helps organizations protect their identities, data and Azure and Microsoft 365 environments, while meeting their obligations, from Law 25 to financial-sector requirements.
Learn more- 01
Identity and Zero Trust
Conditional access, MFA, privileged access management and hardening of Entra ID and Active Directory, aligned with CIS Benchmarks.
- 02
Data protection and Law 25
Classification, sensitivity labels and data loss prevention with Microsoft Purview, to govern personal information and support your audits.
- 03
Detection and vulnerability management
Microsoft Defender XDR, Sentinel (SIEM/SOAR) and Tenable scanning, with risks prioritized by business impact and clear dashboards for your teams.
- 04
Cloud architecture and governance
Azure landing zones, Azure Policy, Microsoft 365 migrations and TOGAF-inspired architecture documentation, for a scalable, auditable environment.
Clients served
A few organizations we have supported.
- Desjardins
- Banque Nationale
- Logibec
- Curateur public du Québec
- Ministère des Transports du Québec
- Fonds de solidarité FTQ
- Palais des congrès de Montréal
- Ville de Montréal
- Caisse de dépôt et placement du Québec (CDPQ)
- BRP
- EXO
- Domtar
- Société de l'assurance automobile du Québec (SAAQ)
- …and more
Let's talk about your security
Reply within one business day. 30-minute first call.
- Email :
- info@grdinc.ca
- Phone :
- 514 291-9003
- Address :
- Montreal, Quebec
- Hours :
- Mon–Fri, 8:30 a.m. to 5 p.m.