What will I find here?

Three formats, always dated and sourced: the analysis of a threat or a news item and what it changes for a regulated organization; the breakdown of a regulatory requirement or deadline and how to prepare for it; and anonymized lessons from our engagements. Every article cites its primary sources and gives our reading, signed Sentrix.

How do I follow new articles?

Through the blog's RSS feed, in French or English, or by following Sentrix on LinkedIn, where every article is posted. The Watch page complements the blog: it gathers the official advisories of Québec, Canada, the United States and Europe, refreshed every thirty minutes, while the blog takes the time to analyze.

IdentityVulnerabilitiesExposureSoftware supply chainSOC 2Third-party riskPIPEDAPrivacyNIST CSFAwarenessCritical systemsLaw 25MunicipalitiesHealth dataComplianceDefenceRansomwareFraudCyber insuranceNERC CIPCRANIS2CPCSCISO 27001DORATGVIncidentsCloudAIFinanceDefenseAnalysisRegulatory breakdownField notesIdentityVulnerabilitiesExposureSoftware supply chainSOC 2Third-party riskPIPEDAPrivacyNIST CSFAwarenessCritical systemsLaw 25MunicipalitiesHealth dataComplianceDefenceRansomwareFraudCyber insuranceNERC CIPCRANIS2CPCSCISO 27001DORATGVIncidentsCloudAIFinanceDefenseAnalysisRegulatory breakdownField notes

DefenseFinanceAICloudIncidentsTGVDORAISO 27001CPCSCNIS2CRANERC CIPCyber insuranceFraudRansomwareDefenceComplianceHealth dataMunicipalitiesLaw 25Critical systemsAwarenessNIST CSFPrivacyPIPEDAThird-party riskSOC 2Software supply chainExposureVulnerabilitiesIdentityField notesRegulatory breakdownAnalysisDefenseFinanceAICloudIncidentsTGVDORAISO 27001CPCSCNIS2CRANERC CIPCyber insuranceFraudRansomwareDefenceComplianceHealth dataMunicipalitiesLaw 25Critical systemsAwarenessNIST CSFPrivacyPIPEDAThird-party riskSOC 2Software supply chainExposureVulnerabilitiesIdentityField notesRegulatory breakdownAnalysis

Blog · Dated, sourced analyses

The Sentrix blog

Short, dated analyses of threats, regulatory obligations and compliance practice, written by the Sentrix team with their primary sources cited every time.

latest on November 2, 2026RSS feed

FeaturedAnalysis · IdentityNovember 2, 20264 min read

Help desk voice phishing: the AL26-028 alert

The Canadian Centre for Cyber Security reports fake IT support calls aimed mostly at the legal sector. How to verify callers, handle resets, protect accounts.

Read the article →

Analysis

A threat or a news item, what it changes for a regulated organization, and what we think about it.

Regulatory breakdown

A requirement or a deadline, explained plainly, with how to prepare for it.

Field notes

A lesson from an engagement, anonymized, with what we would do again and what we would avoid.

This week in the watchCanada28Québec53United States2Europe35See the watch by region →

The blog publishes what the team learns in contact with threats, frameworks and auditors: a threat that changes the game, a regulatory deadline to prepare for, a lesson from the field. Every article is dated, cites its primary sources and ends with what we think at Sentrix. For official advisories in continuous time, the Watch page does the rest.

All articles

Frequently asked questions

What will I find here?: Three formats, always dated and sourced: the analysis of a threat or a news item and what it changes for a regulated organization; the breakdown of a regulatory requirement or deadline and how to prepare for it; and anonymized lessons from our engagements. Every article cites its primary sources and gives our reading, signed Sentrix.
How do I follow new articles?: Through the blog's RSS feed, in French or English, or by following Sentrix on LinkedIn, where every article is posted. The Watch page complements the blog: it gathers the official advisories of Québec, Canada, the United States and Europe, refreshed every thirty minutes, while the blog takes the time to analyze.