Overview
Mapping report
The path of your information, from collection to destruction.
Infra Info maps how information travels through your organization, physical and digital alike, then recommends the measures to put in place.
Consulting services for organizations.
Every mandate starts with the same questions: what information do you hold, where does it flow and who has access to it? The nature and scope of the work are defined with each organization, according to the mandate. Need a hand with something specific? We also help as needed, and point you to the right specialists.
Collection, use, disclosure, retention and destruction: we follow the real path of your information through your systems, on your physical media and between the people involved, and we look at your day-to-day practices.
We assess the risks related to your information, your access controls and your technology environments, and carry out your privacy impact assessments before a new project.
Who receives your information, for what purpose, and where is it hosted? We inventory your suppliers, the information exchanged and how it is governed, including outside Quebec.
Your employees already use artificial intelligence? We identify how it is used, assess the risks to your information and help you set the right guardrails.
Policies, procedures, registers and retention schedule: documents that reflect the way you actually work.
Personal information protection, digital hygiene, physical and digital security, responsible use of AI, and everyone's role in the organization.
Together, we define the scope of the mandate: the departments, systems, locations and people involved.
We review your documents and interview your employees and suppliers to understand their actual practices.
Processing activities, data flows and points of contact, physical and digital alike, with on-site validation depending on the mandate. From this we draw the risks and findings, distinguishing what was reported, what was observed and what still needs to be validated.
We develop the suggested measures in order of priority, deliver the reports and provide follow-up.
Depending on the agreed mandate, your deliverables may include:
The path of your information, from collection to destruction.
Your current practices: what works and what needs improvement.
Your processing activities, documented according to your points of contact and your processes.
Your suppliers and the information they exchange with you, based on the information provided.
Potential risks, rated and prioritized within the agreed scope.
Concrete, prioritized recommendations with a roadmap, tracked in Monitoresults depending on your service plan.
See Monitoresults →Depending on the service plan you choose, your organization can access Monitoresults. The measures suggested following the mapping are centralized there, and you can track their progress.
Illustrative preview of the platform, with sample measures.
Our team brings together specialists in IT security and business software development. Our own practices are based on recognized frameworks (ISO 27001/27002, CAN/CIOSC 104), and our privacy policy applies to our own activities the same requirements we help our clients meet.
A filing cabinet at the front desk matters as much as a database. We analyze both.
We support and recommend. Decisions and implementation remain the responsibility of your organization.
Every mandate is kept separate: no client-specific information is ever used for the benefit of another.
Hier, un client m'a dit avec enthousiasme : « Nous avons intégré l'intelligence artificielle dans notre entreprise! Un nouveau système d'analyse de crédit en ligne, et…
Le paradoxe de l'exemplarité réglementaire En tant que professionnel de la protection des renseignements personnels au Québec, je me suis toujours posé cette question…
Malgré des investissements records, les incidents de confidentialité et de sécurité continuent d'augmenter. Fort de plus de 200 audits/analyses réalisés en entreprise en…
Tell us where you stand and we will suggest a starting point suited to your situation.