Trenval et CyberSécuritaire Canada
Regardez Amber Darling de Trenval présenter l’expérience de certification CyberSécuritaire Canada de son organisation avec Complade.
Vidéo en anglais. Publiée le .
Transcription de l’entretien
Entretien en anglais, publié en septembre 2024. La transcription fournie a été légèrement révisée pour la lisibilité et pour corriger les noms propres. Un terme incertain est signalé. Elle présente l’expérience et les propos de l’intervenante à cette époque.
0:00
I'm Amber Darling, and I'm the Executive Director at Trenval Business Development Corporation. We're a Community Futures office in Belleville, Ontario. We were contracted by the Federal Economic Development Agency for Southern Ontario, or FedDev Ontario, to work on getting our cybersecurity certification through the Government of Canada. We are happy to report that we have completed that and that Trenval is now certified as of August 2024.
0:33
The actual day was our Stage 2 audit through Complade. Stage 1 involved putting together all the documents and all the evidence, and then that was reviewed by Complade. They got back to us: these are the couple of little things that you need to have completed before your Stage 2. Our Stage 2 audit took place here at our office. We were fortunate to have backup with another staff member and our IT specialist here on site to work through that with the auditor.
1:08
We started the day with the responsibilities very much laid out, what our expectations were from Complade and what was actually going to happen that day. That was really good, knowing, just starting the meeting, what that day could be. With our success with Stage 1, we had a lot of the work done and already implemented. It was some fact-finding and data checking and recognizing if there was anything that needed to be followed up on.
1:40
We were actually very fortunate that we passed our audit. We had five minor things to follow up with that we have a year to complete before we are reviewed. I'm pleased to say that we've already completed three of those, and the others we are working on while you're kind of in the mode to get those little things. Some of them were very minor, and we addressed them right away so that we know that we are good now for our audit review in a year. We will be continuing with that to make sure that we maintain our certification.
2:17
It's not just protecting ourselves but also our clients. As Community Futures, we do have a loan portfolio. This is something that we can share with our clients: they can trust in us that we are taking care of their personal information and their banking information. The whole journey through the certification process, including the audit, was a journey for the staff. The continued training that we will do on an annual basis will keep us up to date on upcoming cybersecurity threats.
2:59
With our local IT department, we have also learned so much about the behind-the-scenes working. Other than turning the computer on and making sure your Microsoft site works, we just want it to work. It's like turning your car on and you want it to work. Now that we're certified, we do feel very strongly that we're protecting our organization as well as our clients.
3:23
There's no way we could do it ourselves. We just don't have that expertise in-house. What the heck's a [technical term unclear]? You know what I mean? We don't know. I still don't know what that is. It's understanding this terminology. Thank goodness I didn't have to understand most of it, but that's the opportunity to ask questions. I now have a better understanding, as well as all of our staff.
3:57
Certainly our board of directors are happy. In my monthly reporting, we're still working on cybersecurity certification, so this month they're going to be happy to hear: yes, we're good, we've met our minor challenges out of Stage 2. The other two things are just a matter of updating software.
4:15
We were definitely encouraged. We were provided with everybody's websites and the contact information of those parties that did do the certification process. We actually obtained quotes from everyone to determine who we should go to. Fortunately, because Community Futures is a nonprofit, Complade did offer us a discount in services, so that helped us as well. Certainly the level of expertise that Complade has was beneficial, and the staff member who came was an amazing auditor.
5:00
We're like, this is like going through a whole financial audit. It very much is. It was item by item, going through and assessing. What was really great is that at the end of the day he asked for 45 minutes, and then we came back in and he had the whole report ready to tell us the minor issues that we did have. Right then he was saying, we will recommend you for certification. So we knew then, oh, thank goodness, it was a really successful day.
Annonces et ressources pour le développement des collectivités