Specific, Canadian, and free.

One spoofed email with "updated" wiring details can send a client's down payment to a thief, and it almost never comes back. This kit gives you the exact verification habit, the email red flags, a one-pager to hand clients, and a calm first-hour plan if money already moved. No sign-up wall on the value - read it, copy it, put it to work today.

Most clinic ransomware starts with one click at the front desk and ends with a PHIPA decision nobody rehearsed. This free kit gives you three things you can use today: a red-flags checklist for the attachments your front desk actually opens, a one-page "we're locked out" plan to tape by the phone, and a plain-English PHIPA breach-decision and IPC-notification checklist. Print it, post it, and your team is readier than most clinics on the street.

Three things your firm can put to work this week: a verify-before-you-pay SOP for any banking-change request, a card that shows your team how to tell the real CRA from the fake, and a handling checklist for the client data you can't afford to lose - SINs, T-slips, portal logins. No fluff, no fear, no sign-in walls between you and the first useful page. Tuned to how QuickBooks, Xero and CaseWare firms actually work.

Most trust-account losses don't come from a clever hack - they come from a believable email at the worst moment, and a payment that went out before anyone called to confirm. This is the checklist we built for small and boutique GTA firms: a verify-before-you-wire routine, a confidentiality-incident plan with your LSO and LawPRO duties in mind, and the email tells that give a fake "client" or "opposing counsel" away. Print it, walk it through at your next firm meeting, and pin it by the desk where the money moves.

Most owners have a gut feeling about where they're exposed, but never a clear picture. This is the picture. Answer 25 plain-English yes-or-no questions about how your team handles email, money, devices and a bad day - tally your score, and see exactly where you'd start. No sign-in wall to read it, no jargon, and nothing here that could appear on a generic cyber-tips blog. Each question maps to a Canadian Centre for Cyber Security baseline control, so a low answer points straight at a real fix.