The Cyberphore blog exists to give Canadian organizations accurate, current and practical security information. These standards apply to every article we publish.
What We Publish
We publish two kinds of article:
- In-depth analysis. Longer articles that explain a subject for Canadian small and mid-sized organizations, with a practical checklist and answers to common questions.
- Briefings. Short, dated articles on a specific development: what happened, who is affected in Canada, what to do now, and the sources.
Each article opens with a direct answer, then gives the detail. Articles are written in plain Canadian English.
Research and Sourcing
Articles are researched from primary and authoritative sources first: the Canadian Centre for Cyber Security, the Office of the Privacy Commissioner of Canada and provincial commissioners, legislation and regulators, vendor security advisories, vulnerability databases such as CVE, and recognized annual reports.
- Cited where it is used. Every factual claim, statistic, date or legal requirement links to its source at the point where it appears.
- Numbers need a source. We only publish a figure when a source states it, and we name that source.
- Moving facts are dated. Information that changes quickly, such as the status of a bill or an active threat, is labelled "as of" a specific date.
- Sources listed. Each article ends with a numbered list of its sources, with the publisher and date.
We do not invent examples, clients, case studies, quotes or statistics. Where an illustrative example helps, it is labelled as an example and kept generic.
Fact-Checking and Expert Review
Before an article is published, every claim is checked against its source. Each article is then reviewed and approved by a named human expert, who is credited as the technical reviewer.
Every article names its author and its technical reviewer, with their certifications. Every Cyberphore team member, from analysts to leadership, holds industry certifications, such as CISSP, CISM, OSCP, OSCE and GIAC certifications.
Keeping Articles Current
Each article shows three dates: when it was published, when it was last updated, and when its facts were last reviewed. In-depth articles are re-checked at least every 90 days.
- Changelog. When an article is materially updated, the change and its date are recorded in a changelog at the end of the article.
- Superseded briefings. When newer guidance replaces a briefing, the briefing is marked as superseded and links to the current article.
Corrections Policy
If we get something wrong, we correct it openly. When an error is confirmed, we fix the article, update its "last updated" date and record the correction and its date in the article's changelog. We do not quietly change facts.
To report an error, email sales@cyberphore.com with the article address and the correction, ideally with a source.
Independence
We do not publish sponsored posts or paid placements, and no one pays to be mentioned or covered. Cyberphore works with technology partners; partnerships do not decide what we write about.
Cyberphore is a cybersecurity services company. Articles may end with a short paragraph on how Cyberphore can help, kept separate from the analysis and clearly about our services.
Use of AI
Research and drafting assistance from AI tools may be used. Every article is fact-checked and approved by a named human expert before it is published, and the people named on an article are responsible for its content.
Contact the Editors
Corrections, questions about these standards and topic suggestions: sales@cyberphore.com. If you are dealing with a security incident right now, call our 24/7 line at +1 236 665 1165.