Canadian Centre for Cyber Security
Cyber security guidance
Practical guidance, alerts, and advice for protecting information and technology assets.
Visit external resource (opens in a new tab)Sixway Resource Centre
Practical resources for technology and cyber decisions.
Find approved checklists, guides, executive briefs, and whitepapers designed to support practical business and technology decisions.
Cyber tools
Authoritative resources for informed action.
Direct access to official Canadian guidance and established public cybersecurity frameworks. External resources open on their source websites.
Government of Canada
Get Cyber Safe
Plain-language Canadian guidance for securing accounts, devices, connections, and everyday online activity.
Visit external resource (opens in a new tab)CISA
Known Exploited Vulnerabilities Catalog
A reference for identifying vulnerabilities with evidence of active exploitation and informing remediation priorities.
Visit external resource (opens in a new tab)NIST
Cybersecurity Framework 2.0
A flexible framework for governing, understanding, and improving organizational cybersecurity risk.
Visit external resource (opens in a new tab)External links are provided for convenience. Their inclusion does not imply partnership, certification, endorsement, or ownership by Sixway.
Practical guidance
Six focused actions that improve cyber readiness.
Use these prompts to support internal planning. Apply them in the context of your environment, risk profile, and obligations.
Strengthen identity first
Require multi-factor authentication, remove dormant accounts, and review privileged access on a defined schedule.
Prioritize exposed vulnerabilities
Combine asset ownership, internet exposure, business criticality, and evidence of active exploitation when setting remediation order.
Test recovery—not just backups
Validate restore procedures, dependencies, recovery roles, and achievable recovery objectives through regular exercises.
Prepare incident decisions in advance
Document decision owners, escalation paths, critical contacts, evidence handling, and communications responsibilities before an incident.
Review third-party access
Assign an internal owner, limit access to what is required, and include timely access revocation in supplier exit processes.
Make risk reporting actionable
Connect each material issue to an affected business service, accountable owner, next action, and target date.
This general information is not a substitute for a security assessment, legal advice, or regulatory guidance specific to your organization.
Resource library
Approved Sixway guides and perspectives.
Only reviewed and approved downloadable resources are published in the library.
Cyber Risk Executive Checklist
A decision-focused checklist for understanding material cyber risk, clarifying ownership, and setting defensible priorities.
Explore Cyber Risk Executive ChecklistPreparing for a Cybersecurity Assessment
A practical preparation guide for establishing scope, stakeholders, business context, and useful evidence before an assessment begins.
Explore Preparing for a Cybersecurity AssessmentNeed a focused starting point?
Request a conversation about your current priorities.
Sixway can help identify an appropriate assessment, advisory, implementation, or managed-service next step.
Request an Assessment