Cybersecurity

We provide comprehensive cybersecurity risk management services that enable clients to maintain business agility and innovation while effectively managing and responding to cyber risks. Our end-to-end approach includes diagnosis, solution identification, design, control implementation, and checks, with expertise in addressing security at the organizational level, in industrial environments, and for embedded systems.

Cybersecurity consulting

Providing strategy and roadmap, risk assessment plans, policies and procedures development, training and organizational change management for building cultural change into ways of working

Cybersecurity engineering

Assisting clients in finding solutions to address their risk mitigation plans, including domain areas such as identity and access management, threat management including specialized processes, solutions, and services, and information protection.

Managed security services/security operations centers (SOCs)

Including 24/7 systems monitoring, real-time reporting and immediate action on suspicious activity, whether on client premises or at CGI-managed SOCs, helping clients bridge the gap in security talent.

Risk consulting

Providing risk management, as well as audit and internal control consulting by bringing strong methodological expertise and experience.

Auditing

Defining action plans and monitoring their implementation, our control capabilities encompass various methods (such as IIA), including technical controls like penetration testing.

Control functions and frameworks

Implementation of solutions allowing for the seamless integration of control frameworks (such as ISO 2700x/31000, COSO, COBIT, NIST), policies, and regulations that govern the organization.