Where do you really stand?
A 30-question maturity self-assessment based on NIST CSF 2.0. An honest score, your weakest link and a 90-day plan.
Eight short, practical guides, written by the experts at EVA Technologies, a Québec cybersecurity firm since 1996. Each one includes a tool you can use tomorrow, a 90-day plan and clear signs for when to ask for help.
Most small and mid-sized businesses know cybersecurity matters. What's missing is knowing where to start, what to check and how to prove it.
These guides give you the essentials for free: grids, checklists and ready-to-use scenarios, grounded in recognized frameworks such as NIST CSF 2.0 and in Canadian privacy obligations.
Download one guide or the whole collection, as PDF.
A 30-question maturity self-assessment based on NIST CSF 2.0. An honest score, your weakest link and a 90-day plan.
Test your backups before they let you down: a 12-point audit, a 7-step restore test and the right reflexes on D-Day.
Your business from the outside, in one hour: 10 free checks and a grid to fix things in the right order.
Rank your suppliers into 3 tiers, send them the right questionnaire and require the right clauses.
The incident response plan that fits on one page: who decides, who to call, what to preserve.
Simulate a crisis in 90 minutes with your leadership, using a ready-to-run scenario with 4 injects.
Govern cyber risk without being a technician: the right questions, the warning signs and the proof to ask for.
Recognize an incident, assess the harm, know who to notify and keep the register the law requires.
One short form, asked only once. The first time you download a guide, we ask for a few details. After that, every guide opens directly for 30 days.
Start with guide 01 to get your score and find your weakest link.
Guides 02, 03 and 04: backups, attack surface and suppliers.
Guides 05 and 06: a one-page plan, then a first crisis exercise.
Guides 07 and 08: the right questions for leadership and your privacy obligations.
EVA Technologies supports organizations with assessment and audit, testing and monitoring, consulting and strategy, training and incident readiness. Everything starts with a first meeting, to make sure our missions align.