Skip to main content
Canada Cyber-Safe
Canada Cyber-Safe

19 October 2026

OSFI has endorsed 12 AI practices. What a financial institution’s board should be able to show
OSFI has endorsed the Financial Stability Board's twelve sound practices for responsible AI. Not a new rule, but a clear signal of the evidence boards will be asked for, six months before E-23 takes effect.
Read More
WestJet had MFA. The attacker went around it. Here is what the regulator asked for next
The Privacy Commissioner closed the WestJet breach file without a finding, after an independent assessment of its new safeguards. Three lessons for boards: MFA resets, independent evidence and reporting speed.
Read More

Canada Cyber-Safe is an independent commercial practice and a trading name of Skeldra Group, 100 University Avenue, Toronto, Ontario M5J 1V6. It is not a Government of Canada agency or programme, and nothing we sell constitutes government certification or accreditation.

Standards we assess against

ISO/IEC 27001:2022 · ISO/IEC 27701:2025 · ISO 9001:2015 · ISO/IEC 42001:2023 · ISO/IEC 23894:2023 (guidance) · ISO/IEC 42005:2025 (guidance)

Français : La première heure — rédigé en français, pas une traduction automatique.

Canada Cyber-Safe is an independent assessment practice. We are not a certification body and we do not issue certificates.