-
Why Cybersecurity Fails Without Risk‑Based Prioritization
Read more: Why Cybersecurity Fails Without Risk‑Based PrioritizationMost cybersecurity programs fail for a simple reason: they try to fix everything at once. Without prioritization, organizations waste time, burn resources, and focus on the wrong problems. Cybersecurity must be risk‑based — not checklist‑based. That’s why the CyberDynamX Matrix uses a NOW / NEXT / LATER model. It ensures organizations address the highest‑risk…
-
Why Blaming the Framework Puts Small Organizations at Risk
Read more: Why Blaming the Framework Puts Small Organizations at RiskWhen small organizations feel overwhelmed by cybersecurity, they often blame the framework. “NIST CSF is too big.” “NIST CSF doesn’t fit us.” “NIST CSF is for enterprises.” But blaming the framework doesn’t reduce risk — it increases it. NIST CSF isn’t the problem. The problem is the assumption that small organizations must implement it…
-
Cybersecurity Is a Leadership Function — Not an IT Task
Read more: Cybersecurity Is a Leadership Function — Not an IT TaskCybersecurity has outgrown its origins as a technical discipline. Today, it’s a leadership function — one that shapes business continuity, customer trust, regulatory compliance, and organizational resilience. Yet many organizations still treat cybersecurity as an IT problem. This mindset creates blind spots, misaligned priorities, and stalled progress. Cybersecurity requires leadership engagement because the decisions…
-
Why NIST CSF 2.0 Is Becoming the Standard for Cyber Clarity
Read more: Why NIST CSF 2.0 Is Becoming the Standard for Cyber ClarityOrganizations everywhere are adopting NIST CSF 2.0 — not because it’s new, but because it’s practical. It provides a structured, comprehensive, and business‑friendly way to understand cybersecurity risk. And in a world where cyber threats evolve faster than budgets, clarity is everything. NIST CSF 2.0 organizes cybersecurity into six core functions: Govern, Identify, Protect,…
-
The One‑Page Cybersecurity View That Changes Executive Conversations
Read more: The One‑Page Cybersecurity View That Changes Executive ConversationsExecutives don’t struggle with cybersecurity because they lack intelligence — they struggle because cybersecurity is fragmented. Every conversation becomes a maze of tools, controls, incidents, risks, and technical jargon. Leaders are expected to make decisions without ever seeing the full picture. That’s exactly why the CyberDynamX Matrix exists. The Matrix is a one‑page, risk‑prioritized…
-
The Dangerous Myth: “NIST CSF Doesn’t Apply to Small Organizations”
Read more: The Dangerous Myth: “NIST CSF Doesn’t Apply to Small Organizations”A common misconception among small organizations is the belief that NIST CSF “doesn’t apply” to them. It’s understandable — the framework is comprehensive, and small teams often feel overwhelmed by its scope. But this belief is dangerous. NIST CSF applies to every organization, regardless of size. What changes is how you implement it. Small…
-
The Small (org) Car Manufacturer Problem
Read more: The Small (org) Car Manufacturer ProblemImagine a small car manufacturer that says: “We’re small, and we don’t have any skill in transmissions — so we just won’t build them.” The car might look fine from the outside. It might have doors, seats, windows, and a steering wheel. But it won’t function. It won’t move. It won’t serve its purpose.…
-
The Anatomy of a SMiShing Attack
Read more: The Anatomy of a SMiShing AttackIt was late in the afternoon when my phone buzzed with a new SMS. The message caught my eye, not because I believed it, but because unraveling scams like this has always intrigued me. Little did I know, this text would lead me down a rabbit hole of discovery, shedding light on how modern…
-
A Cybersecurity Primer
Read more: A Cybersecurity PrimerI’m excited to share that I recently had the pleasure of sitting down with my colleague from our master’s cohort, Mr. David LeBlanc, founder of the LeBlanc Leadership Group, to introduce some foundational concepts in cybersecurity. We discussed my latest work and my upcoming book, CyberDynamX: The Art and Science of Building a Simplified…
-
Romance Baiting: Protecting the Ones We Love Through Awareness and Connection
Read more: Romance Baiting: Protecting the Ones We Love Through Awareness and ConnectionWhy do we connect with others? Because deep down, we all long for trust, understanding, and love. But in a world so deeply connected online, this fundamental human need is being exploited by those with dishonest intentions. Romance baiting—a growing online scam targeting those seeking companionship—takes advantage of this vulnerability. While anyone can fall…
News & Updates
Buy my book
The Art and Science of Building a Simplified Digital Security Program
In CyberDynamX, I guide you through the process of creating a structured, resilient digital security program tailored to meet your organization’s unique needs. This approach helps integrate security seamlessly into daily operations, setting the foundation for a proactive cybersecurity culture.
- Master risk management and build a risk-aware culture.
- Classify and secure essential data assets.
- Design a governance framework with robust security architecture.
- Establish clear policies, standards, and control measures.
- Implement resilient strategies without relying on “quick fixes.”
Curtis is the definition of professionalism. He is one of the most knowledgeable professionals it is my pleasure to know in the areas of Security and Compliance.
I wish that I’d had this book when I was starting out in cyber security. It would have saved me from making many common and uncommon mistakes, leaving me free to find new and creative mistakes of my own to make.
Chief Information Security Officer
University of Northern BC
Your work has been sooo helpful!
Director, Information Technology
Olds College
Curtis has proven to be a strong and highly knowledgeable professional who has served our organization very well…
CIO
Alberta Blue Cross
I'm a practical person, and I don't like to fall into excessive praising, but I chose my words lightly when I say you were very inspiring.
Sr. Consultant/Manager
KPMG
I still have the materials and lessons learned from the leadership program you did for us!
Manager Server Infrastructure & Operations
Alberta Blue Cross
Much of your work regarding IT Security Governance has remained as the foundation for effective operations. And it provided an excellent foundation that we could expand upon. Your great work, and its cumulative impacts, set us up for future success in a lot of regards. Also, our Enterprise Architect is a big fan.
Director of Information, Risk & Compliance
NorQuest College
He is a visionary…
CTO
ATB Financial
Curtis is a pragmatic strategist who emphasizes risk reduction and digital resilience by implementing effective controls in key areas to thwart one's adversaries.
Field CTO Cybersecurity
Cisco Canada
I’ve had the privilege of working with Curtis on some really cool things this past year. He’s a trusted source, whip smart, super humble, and an all-around great guy. If you’re employed in any cyber security role regardless if you’re just starting out or have a few battle scars, his book is probably something you want to add to your library.
Director, Cybersecurity & CISO
MacEwan University
I have been consistently impressed by Curtis' professional competency and solid knowledge in the IT security, compliance and governance disciplines.
Sr. Manager
Alberta Blue Cross
…you speak with humility, something that makes you very approachable, especially to people who may not have the confidence of those more established in the field. Cybersecurity needs more people like you.
Chief Information Security Officer
University of Northern BC
If you’re looking for someone with that rare combination of character, vision and leadership, who can still roll up their sleeves to get things done, meet Curtis Blais.
President
SC Canada Services Inc.
I've never worked with a person with more integrity.
Information Security Analyst
AIMCo
He always demonstrates professionalism in every facet of business and has a proven record of success as a leader…
Director, National Solutions Delivery
TELUS
Curtis is a strategic 21st Century thinker and doer and he has a vision that captures the imagination. Curtis is a highly regarded leader in the security community.
CSO / Canadian Security Director of the Year
TELUS
Curtis’ leadership and guidance in advancing cybersecurity programs within Canada’s higher education sector highlight his deep expertise in risk management and his commitment to high standards.
Chief Information Security Officer
British Columbia Institute of Technology
I believe the book is well positioned to be a thought-leader and practical guide for organizations looking to establish a solid security posture. I love how the book transcends the commercial and not-for-profit sectors, and is applicable to companies in Canada, the US, and internationally. Highly recommended and worth every penny!
CISO
MRNET
Curtis is a leader, humble, creative, and has a tremendous amount of integrity.
Team Manager
Alberta Blue Cross
Curtis is one of the most creative mind I know, and taught me to think outside of the box…
Senior Security Consultant
TELUS