Field Notes

The TruPoint blog.

Practical writing from our vCISOs, SOC analysts, and platform engineers. No vendor talk. No fluff.

APR 22, 2026 COMPLIANCE & INSURANCE
Why Canadian SMBs Are Failing Their Cyber Insurance Renewals

A field-tested playbook for the 28 controls insurers actually score — and the order to roll them out without breaking your team.

8 MIN READ
APR 18, 2026 ZERO TRUST
VPN Is Dead. Here's What Replaces It in 2026.

The four moves we make on every Cloudflare ZTNA rollout, in the order we make them.

6 MIN READ
APR 09, 2026 AUTOMATION
Five n8n Workflows Every SMB Should Run

Onboarding, offboarding, M365 hygiene, vendor risk intake, and a runbook bot for your service desk.

5 MIN READ
MAR 28, 2026 NEWS
TruPoint Achieves SOC II Type 2 Certification

Independent attestation for our private cloud and managed services. What it means for our clients and partners.

3 MIN READ
MAR 21, 2026 MICROSOFT 365
The 150 M365 Policies We Set Before Day One

CIS, CISA, and the ones we add for Canadian SMBs. The full list, with rationale for each category.

9 MIN READ
MAR 14, 2026 AI & COPILOT
Copilot Without the Compliance Nightmare

The governance pattern we deploy before any client turns Copilot on.

7 MIN READ
MAR 06, 2026 CYBERSECURITY
A Day in the Life of a Canadian SOC Analyst

What our analysts see on a Wednesday afternoon — and why it matters when your insurer asks 'who is watching?'

6 MIN READ
Stay current

A monthly letter for IT leaders.

Subscribe →