Cyber Security For Small Business

Answer Yes On Your
Cyber Insurance Renewal.

Email authentication, MFA, password management, staff training and an incident response plan, built, run and documented every month. It protects the business, not just the website.

Cyber Security Plans

Monthly. Cyber Security protects the business. The website itself is Website Care.

Shield

$250CAD per month

The perimeter. For any business with staff email and a domain.

  • SPF, DKIM and DMARC built and moved to reject on a schedule
  • DMARC report monitoring
  • Lookalike and typo domain monitoring
  • DNS change alerting
  • Breach exposure monitoring for the company domain
  • MFA enforced across business accounts
  • Password manager deployed, with a written policy
  • Quarterly access audit
  • Monthly security report
  • Annual cyber insurance questionnaire support
Start Here
Most Chosen

Fortify

$600CAD per month

The perimeter plus the people. For businesses with staff, client data and something to lose.

  • Everything from Shield
  • Endpoint protection, up to 10 devices
  • Quarterly security awareness training
  • Quarterly phishing simulation, results reported
  • Offboarding protocol on every departure
  • Company data backup beyond the website, restore verified
  • Written incident response plan
  • Policy pack: acceptable use, passwords, retention, devices
Start Here

Command

$1,500CAD per month

Managed. For clinics, firms and property managers holding client data or facing compliance.

  • Everything from Fortify
  • Up to 25 devices
  • Monthly phishing simulation
  • Vendor and third party access review
  • Quarterly tabletop incident exercise
  • Named incident response contact
  • PIPEDA, Quebec Law 25 and SOC 2 readiness documentation
  • Quarterly executive briefing
Start Here

Sold On A Deadline,
Not A Breach Story.

Two dated events make the decision for you. Both come with a list of questions you have to answer truthfully.

Your Cyber Insurance Renewal

Insurers ask whether you have multi factor authentication, tested backups, email authentication, staff training and an incident response plan. Answering no, or guessing, can mean a decline, a higher premium or cover that does not pay. This plan makes the answers yes and gives you the documents to prove it.

A Client's Vendor Security Form

A larger client sends a vendor security questionnaire before they sign or renew. Same questions, same mechanic: the work is done, written down and ready to attach to your answers.

Care Protects The Website.
Cyber Security Protects The Business.

Two monthly plans that never cover the same thing. If it lives on the website, it is Care. If it would still be a problem with the website switched off, it is Cyber Security.

CoveredWebsite CareCyber Security
WordPress core and plugin updatesYesNo
Website backups and restore testingYesNo
Website malware scanningYesNo
Website uptime monitoringYesNo
SSL certificateYesNo
Website performanceYesNo
Business email authenticationNoYes
Lookalike domain monitoringNoYes
Staff account security and MFANoYes
Password managementNoYes
Staff devicesNoYes
Phishing training and simulationNoYes
Company data backup, beyond the siteNoYes
Incident response planNoYes
Cyber insurance questionnaireNoYes
Access offboardingNoYes

Both Lines.
One Monthly Plan.

Website Care and Cyber Security together, for less than the two bought separately.

Protected

Essential Care plus Shield

$300CAD per month

Saves $50 CAD a month

For a small business that wants the site and the inbox both looked after.

Start Protected

Protected Growth

Growth Care plus Fortify

$750CAD per month

Saves $100 CAD a month

For a team with staff, client data and a site that has to keep growing.

Start Protected Growth

Protected Command

Dominate Care plus Command

$2,000CAD per month

Saves $250 CAD a month

For clinics, firms and property managers that need the whole thing managed.

Start Protected Command

What We Do.
What We Never Claim.

Security carries liability a maintenance plan does not, so the scope is written down before the first invoice.

What The Plan Does

  • Builds, enforces and monitors the controls in your plan
  • Documents every control for insurers and client questionnaires
  • Supports readiness for PIPEDA, Quebec Law 25 and SOC 2
  • Keeps a written record of every recommendation and your decision

What We Never Claim

  • Penetration testing, unless a qualified third party performs it
  • A 24/7 security operations centre. Wise Media does not run one
  • That a breach will be prevented. The service reduces likelihood and improves recovery
  • Compliance certification. That is an auditor's job
  • Legal advice on breach notification. That is your lawyer's

Secured Across
What Your Business Runs.

Email, domains, DNS, passwords, devices and shared files, on the platforms the business already pays for.

What You Get

Six parts of every cyber security build, and the job each one does.

EmailAuthentication
yourdomain.com SPFSender allowedDKIMSignature validDMARCAligned Checked on every message DMARC policy p=nonep=nonep=quarantinep=quarantinep=rejectp=rejectMoved To Reject

SPF, DKIM and DMARC, moved to reject.

Your domain gets hard to spoof, and DMARC reports show who tries to send as you.

WatchLookalike Domains
yourdomain.comYours yourdomian.comFlaggedyour-domain.coFlaggedyourdornain.comFlagged

Typo domains flagged before they phish.

Lookalike domains, DNS changes and breach exposure for the company domain, monitored.

AccessMFA And Passwords
Approve sign in? 482 193Approved Vault โ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ขโ€ข

MFA on every account, one password manager.

Multi factor enforced, a password manager deployed and an access audit every quarter.

PeopleTraining
Invoice overdue, pay now From: accounts@yourdomian.com Pay invoice Reported by staff Simulation results ReportedIgnoredClicked Shared in the quarterly reportSimulated, Not Real

Phishing simulations, results reported.

Security awareness training and simulated phishing, so staff spot the real one.

ProveInsurance Ready
Cyber insurance renewalQuestionnaire Multi factor authentication enforced? No YesBackups tested by restore? No YesEmail authentication in place? No YesStaff security training? No YesWritten incident response plan? No YesDocumented Proof

Your renewal questions, answered yes with proof.

MFA, tested backups, email authentication, training and a written response plan, documented.

ExitDevices And Offboarding
MacBook, SalesFront desk PCiPhone, Owner A staff member leaves Email, files, apps: access removed

Devices protected, access removed on exit.

Endpoint protection on staff devices and an offboarding protocol run on every departure.

Cyber Security Questions

Straight answers before you book the call.

Quick Answer

What Does Small Business Cyber Security Cover?

Wise Media Cyber Security protects the parts of a business that are still at risk with the website switched off: email authentication, lookalike domains, staff accounts and MFA, passwords, staff devices, phishing training, company data backup, offboarding and a written incident response plan. Every control is documented, so cyber insurance and vendor questionnaires can be answered truthfully.

  • Perimeter. SPF, DKIM, DMARC, MFA and a password manager on every plan.
  • People. Training and phishing simulations from Fortify up.
  • Proof. Documentation for insurers and client questionnaires.
  • Starting point. Plans start at $250CAD per month.

FAQ

Frequently Asked Questions

Shield is $250CAD a month for email authentication, MFA, a password manager and monitoring. Fortify is $600CAD and adds endpoint protection for up to ten devices, training, phishing simulations and an incident response plan. Command is $1,500CAD for up to 25 devices, monthly simulations and compliance documentation.

That is the point of it. Insurers ask about MFA, tested backups, email authentication, staff training and an incident response plan. The plans put those controls in place and document them, and Shield includes annual support with the insurance questionnaire.

No, and nobody honest can. The service reduces the likelihood of an incident and improves how fast you recover. Wise Media does not run a 24/7 security operations centre and does not perform penetration testing itself.

Website Care protects the website: updates, backups, malware scanning, uptime and performance. Cyber Security protects the business: email, accounts, devices, staff and company data. Nothing is covered twice, and the two can be bundled.

DMARC tells receiving mail servers what to do with email that claims to be from your domain but fails SPF or DKIM. Moved to reject, it stops most spoofed email sent in your name, and its reports show who is trying.

Ask on the call. Cyber Security is built around the business, not the website, and it pairs with Website Care in the Protected bundles.

Not directly. If a penetration test is needed, it is performed by a qualified third party. Wise Media will not describe its own work as a penetration test.

No. Certification is an auditor's job. The Command plan supports readiness and documentation for PIPEDA, Quebec Law 25 and SOC 2.

From Fortify up, a written offboarding protocol is run on every departure: accounts, email, files, apps and devices, with access removed and recorded.

It is your decision. Every recommendation and your decision on it is written down, so there is a clear record for you, your insurer and Wise Media.

Wise Media, a Calgary studio led by Cody Wise, runs monthly cyber security plans for small businesses across Canada and the United States: email authentication, MFA, password management, staff training, endpoint protection and incident response plans.

Insurers commonly ask whether you enforce multi factor authentication, test your backups, authenticate your email, train staff and have a written incident response plan. Wise Media puts those controls in place and documents them.

Pick a plan on this page or book a call at /book/. Bring your insurance questionnaire or a client's vendor form, and Wise Media shows which answers are no today and what turns them into yes.

Set up SPF and DKIM, then publish DMARC and move its policy to reject on a schedule while watching the reports. Wise Media does this on every Cyber Security plan.

Make The Answers
Yes, With Proof.

Bring your insurer's questionnaire or a client's vendor form. We will show you which answers are no today and what turns them into yes.