Skip to content
Groupe Conseil GRD – Cybersécurité
FREN
Flagship offer

Law 25 readiness assessment in 10 business days

A clear view of your gaps and a prioritized action plan, delivered by a Microsoft-certified team.

Request a quote

What's covered

  • Designation of the person in charge of personal information
  • Personal information inventory
  • Privacy impact assessment (PIA)
  • Confidentiality incident register
  • Consent and transparency (policy, website)
  • Retention and destruction
  • Microsoft 365 / Purview controls

Deliverables

  • Prioritized gap report
  • 12-month action plan
  • Templates: policy, incident register, PIA
  • 60-minute leadership presentation

10-day timeline

  1. Days 1–2

    Kickoff and collection

  2. Days 3–6

    Interviews and technical review

  3. Days 7–9

    Analysis and writing

  4. Day 10

    Plan presentation

5-question self-assessment

Answer honestly: the result stays in your browser.

  1. 1. Have you designated a person in charge of personal information and published their contact details?
  2. 2. Do you have an up-to-date privacy policy published on your website?
  3. 3. Do you keep a confidentiality incident register?
  4. 4. Do you perform a PIA before new projects or transfers outside Quebec?
  5. 5. Is multifactor authentication enabled for all your Microsoft 365 accounts?

Book my assessment

We'll reply within one business day to set a kickoff date.