<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Patch &amp; Retainer</title><link>http://localhost:4173/</link><description>Managed cybersecurity service pricing in Canada: MSSP, MDR, SOC, vCISO and pen-test pricing models, illustrative CAD ranges, breach rules, Bill C-8 and SLA checklists.</description><language>en-CA</language>
<item><title>Bill C-8 and the Critical Cyber Systems Protection Act: status in 2026 and who it covers</title><link>http://localhost:4173/pricing-and-rules/bill-c-8-critical-cyber-systems-act-status/</link><guid>http://localhost:4173/pricing-and-rules/bill-c-8-critical-cyber-systems-act-status/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>Bill C-8 in October 2026: Royal Assent, who the Critical Cyber Systems Protection Act covers, its duties and what it means for SMEs.</description></item>
<item><title>Breach reporting in Canada: PIPEDA, Quebec Law 25 and Alberta PIPA, and what your security provider must do</title><link>http://localhost:4173/pricing-and-rules/breach-reporting-pipeda-law-25-alberta/</link><guid>http://localhost:4173/pricing-and-rules/breach-reporting-pipeda-law-25-alberta/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>When to report a breach to the OPC, the CAI or Alberta, records to keep, and how to write breach duties into a security contract.</description></item>
<item><title>Cyber-insurance security requirements: how insurer questionnaires shape your managed security spend</title><link>http://localhost:4173/failures-and-sources/cyber-insurance-security-requirements/</link><guid>http://localhost:4173/failures-and-sources/cyber-insurance-security-requirements/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>The controls cyber insurers commonly ask about, how to answer accurately, how managed services provide evidence and claim coordination.</description></item>
<item><title>CyberSecure Canada and the Cyber Centre baseline controls: what SMEs need and what a provider can cover</title><link>http://localhost:4173/failures-and-sources/cybersecure-canada-baseline-controls/</link><guid>http://localhost:4173/failures-and-sources/cybersecure-canada-baseline-controls/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>The Cyber Centre's 13 baseline controls for SMEs, how CyberSecure Canada certification relates, and which a managed provider can run.</description></item>
<item><title>GST/HST and QST on managed security services, including foreign and USD-billed providers</title><link>http://localhost:4173/pricing-and-rules/gst-hst-qst-managed-security-services/</link><guid>http://localhost:4173/pricing-and-rules/gst-hst-qst-managed-security-services/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>GST, HST, QST and PST on managed security and pen-test fees in Canada, input tax credits, foreign providers and tax-inclusive budgets.</description></item>
<item><title>How to choose a managed security provider in Canada: a best-fit method instead of a ranking</title><link>http://localhost:4173/estimates-and-fit/how-to-choose-managed-security-provider/</link><guid>http://localhost:4173/estimates-and-fit/how-to-choose-managed-security-provider/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>A best-fit method for choosing a managed security provider in Canada: outcomes, inventory, weighted criteria, trials and contract terms.</description></item>
<item><title>In-house SOC vs outsourced MDR or SOC-as-a-service: a cost comparison for Canadian SMEs</title><link>http://localhost:4173/estimates-and-fit/in-house-soc-vs-outsourced-cost/</link><guid>http://localhost:4173/estimates-and-fit/in-house-soc-vs-outsourced-cost/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>In-house 24/7 security monitoring versus outsourced MDR or SOC for Canadian SMEs: cost lines, a payback example and non-cost factors.</description></item>
<item><title>Incident-response retainer pricing: prepaid hours, standby agreements and what they cover</title><link>http://localhost:4173/pricing-and-rules/incident-response-retainer-pricing/</link><guid>http://localhost:4173/pricing-and-rules/incident-response-retainer-pricing/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>How incident-response retainers are priced: prepaid hours, standby deals, insurer panels, response times and how to size one in CAD.</description></item>
<item><title>Managed cybersecurity service pricing in Canada: cost lines, pricing models and what drives the bill</title><link>http://localhost:4173/pricing-and-rules/managed-cybersecurity-service-pricing-canada/</link><guid>http://localhost:4173/pricing-and-rules/managed-cybersecurity-service-pricing-canada/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>How managed cybersecurity is priced in Canada: per user, per endpoint, log volume and retainers, with illustrative CAD ranges and rules.</description></item>
<item><title>Managed firewall, endpoint and EDR pricing: hardware, subscriptions and management fees</title><link>http://localhost:4173/estimates-and-fit/managed-firewall-endpoint-edr-pricing/</link><guid>http://localhost:4173/estimates-and-fit/managed-firewall-endpoint-edr-pricing/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>How managed firewall, endpoint and EDR services are priced: hardware versus firewall-as-a-service, licences, patching and examples.</description></item>
<item><title>Managed security cost examples for Canadian SMEs: 12, 60 and 180 employees worked through</title><link>http://localhost:4173/estimates-and-fit/managed-security-cost-worked-examples/</link><guid>http://localhost:4173/estimates-and-fit/managed-security-cost-worked-examples/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>Three illustrative Canadian businesses (12, 60 and 180 staff) with managed security costed line by line, including tax and growth.</description></item>
<item><title>Why managed security arrangements fail, and the Canadian official sources to check</title><link>http://localhost:4173/failures-and-sources/managed-security-failures-official-sources/</link><guid>http://localhost:4173/failures-and-sources/managed-security-failures-official-sources/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>Common ways managed security fails for Canadian SMEs, early warning signs, and the official regulators and portals to check.</description></item>
<item><title>Managed security scope gaps: the assets, hours and actions quotes often leave out</title><link>http://localhost:4173/failures-and-sources/managed-security-scope-gaps/</link><guid>http://localhost:4173/failures-and-sources/managed-security-scope-gaps/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>The devices, accounts, hours and response actions managed security quotes often leave out, how to find them and what closing them costs.</description></item>
<item><title>Leaving a managed security provider: exit terms, log export, tool ownership and a safe handover</title><link>http://localhost:4173/failures-and-sources/mssp-exit-offboarding-log-retention/</link><guid>http://localhost:4173/failures-and-sources/mssp-exit-offboarding-log-retention/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>How to leave an MSSP, MDR or SOC provider safely: log export, tool and tenant ownership, overlap costs and breach-record duties.</description></item>
<item><title>MSSP and MDR SLA and contract questions: response times, authority, liability and service credits</title><link>http://localhost:4173/estimates-and-fit/mssp-sla-contract-questions/</link><guid>http://localhost:4173/estimates-and-fit/mssp-sla-contract-questions/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>SLA metrics and contract clauses to negotiate with an MSSP or MDR provider: response times, authority, breach notice, liability, credits.</description></item>
<item><title>MSSP vs MDR vs SOC-as-a-service: what each includes and how it is priced</title><link>http://localhost:4173/pricing-and-rules/mssp-vs-mdr-vs-soc-as-a-service/</link><guid>http://localhost:4173/pricing-and-rules/mssp-vs-mdr-vs-soc-as-a-service/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>MSSP, MDR and SOC-as-a-service compared: what each includes, who responds, how each is priced and which fits a Canadian SME.</description></item>
<item><title>Penetration testing cost in Canada, and the written authorisation every test needs</title><link>http://localhost:4173/estimates-and-fit/penetration-testing-cost-authorization/</link><guid>http://localhost:4173/estimates-and-fit/penetration-testing-cost-authorization/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>Pen-test pricing by scope for Canadian SMEs, illustrative fees, and why Criminal Code s. 342.1 makes written authorisation essential.</description></item>
<item><title>Per-user, per-endpoint and tiered pricing for managed security: how to count and compare</title><link>http://localhost:4173/pricing-and-rules/per-user-per-endpoint-pricing-models/</link><guid>http://localhost:4173/pricing-and-rules/per-user-per-endpoint-pricing-models/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>How providers count users, endpoints and servers, how tiers and minimums work, and how to turn different offers into one yearly cost.</description></item>
<item><title>Managed security renewals: price uplifts, endpoint and log growth, and USD exchange-rate buffers</title><link>http://localhost:4173/estimates-and-fit/security-renewal-uplift-usd-fx/</link><guid>http://localhost:4173/estimates-and-fit/security-renewal-uplift-usd-fx/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>Why managed security bills rise at renewal, how endpoint, log and USD effects add up, and how to budget an uplift and FX buffer.</description></item>
<item><title>SIEM and log-volume pricing for SOC services: estimating GB per day, retention and overages</title><link>http://localhost:4173/pricing-and-rules/siem-log-volume-pricing/</link><guid>http://localhost:4173/pricing-and-rules/siem-log-volume-pricing/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>How SOC and managed SIEM pricing by log volume works: estimating GB per day, retention needs, overage terms and cutting noise safely.</description></item>
<item><title>SOC data residency and access: where your security logs live and who can read them</title><link>http://localhost:4173/failures-and-sources/soc-data-residency-access-canada/</link><guid>http://localhost:4173/failures-and-sources/soc-data-residency-access-canada/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>Where SOC logs are stored and who can read them: PIPEDA accountability, Quebec's assessment rule, Alberta notice and contract questions.</description></item>
<item><title>vCISO pricing in Canada: fractional CISO retainers, day rates and what deliverables to expect</title><link>http://localhost:4173/estimates-and-fit/vciso-pricing-retainers/</link><guid>http://localhost:4173/estimates-and-fit/vciso-pricing-retainers/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>How vCISO and fractional CISO services are priced in Canada: retainers, day rates, fixed-fee assessments, deliverables and how to scope one.</description></item>
</channel></rss>
