IT assessment · Canada · 2026
How resilient is your IT, really?
Answer 12 quick questions and see your IT readiness score across security, backup, compliance, infrastructure, network and spend, with your ranked gaps and a 30/60/90-day plan. Free, and no email until you see your score. The full CISSP-led assessment is a fixed-fee engagement from $3,000 if you want it.
Tell us about your business
Two quick questions to size your report. Not scored.
Why teams trust the Fusion assessment
50 Best Managed IT
Named two years running, 2024 and 2025
4.9 on Google
93% first-contact resolution
500+ Canadian SMBs
Supported since 2012
CISSP-led
ITIL 4 practice areas and CIS Controls
What you get
Three answers, three documents
Each one has a different reader and a different shelf life, so we do not bury them in a single chapter.
What you have
A verified register of your devices, accounts, applications, vendors, contracts and renewal dates, checked against your live systems rather than against a spreadsheet. Where one person is the only one who knows how something works, that goes in as well. This is the document you will still be using in three years.
What to fix first
A ranked portfolio of projects, each with the effort, a budgetary cost range, what it depends on, and the specific gap it closes. Split into do now, do next, decide later, and don't. That last band matters: we tell you what is not worth doing, and why.
What it costs to run
Verified seat and device counts, so any quote you receive is priced on real numbers rather than a guess. A register of the conditions in your environment that make a provider add a risk premium. And two lists: what has to be fixed before anyone can quote you honestly, and what belongs inside a transition project.
The method
Two public standards, and a price set by your environment
ITIL 4 practice areas cover how IT is actually run: the service desk, changes, assets, backups, monitoring and vendors. CIS Controls Implementation Group 1 covers the security floor, which is close to what your insurer asks you at renewal. Your CyberSecure Canada position comes off the same fieldwork at no extra cost. Both are public standards, so every finding traces to something you can look up rather than to our opinion.
Pricing works the same way our cybersecurity assessment does. We scope first, then quote a fixed fee in writing, and that fee does not move unless the scope does. It is set by the size of your environment, not by how long the work takes us. The entry price of $3,000 covers a small, single-tenant, cloud-only environment; larger estates, extra sites, on-premises servers or a second legal entity add assessment days at a published rate.
Fusion is a managed service provider, and this assessment produces a scope any provider can bid, including us. Recommendations name the work required, not the vendor who does it. You can hand the result to three companies and compare the answers on identical terms. We work read-only or least-privilege throughout and change nothing.
Why it matters now
The evidence Canadian SMBs are missing
IBM Cost of a Data Breach, 2025
$6.98M average Canadian breach
A documented assessment is the entry point for the controls insurers and regulators now require.
Read moreStatistics Canada, 2023
Only 59% identify cyber risk
Four in ten Canadian businesses run with no documented risk register or control-framework mapping.
Read moreGartner, 2024
25%+ SaaS overspend by 2027
A vendor and contract register routinely surfaces renewals nobody was tracking and licences nobody uses.
Read moreCIRA Cybersecurity Survey, 2025
24% hit by ransomware
Most SMBs lack the evidence package CyberSecure, PIPEDA, and underwriters request at renewal.
Read more
Who it is for
You do not need to be in crisis
Most teams that commission an assessment share one of these four situations.
Your IT person left
Nobody knows what is configured, what is licensed, or what is exposed, and the documentation walked out the door with them.
You are growing fast
What worked for 20 people breaks at 80. Find the constraints before they turn into outages and emergency spend.
You are changing providers
You are about to put IT support out to tender and you need verified numbers and a defined scope before anyone quotes you.
You are preparing for compliance
A contract, a cyber-insurance renewal, or an audit needs documented proof of maturity, on a deadline.
How it works
Scope it, price it, then start
You know the number before any work begins, and the report is yours regardless of what you decide afterward.
1. Free scoping call
A 30-minute call to size the environment: seats, sites, tenants, servers, applications and vendors. No prep needed on your end, and no charge.
2. Fixed quote in writing
We put the scope and the fee in writing, usually within one business day. From $3,000. The fee holds unless you change the scope.
3. Assessment and report
Interviews, read-only configuration review, and vendor and contract review. You get a draft to comment on, then the final report and a readout session.
What our clients say
“I called Fusion in a panic at 9pm on a Friday. By Monday morning our team walked in and got back to work like nothing happened. Every file recovered. No ransom paid.”
SMSandra M.
CEO, Industrial Supply Company, Mississauga
“We went from 35 to 70 employees in under a year. Every new hire needed a laptop, accounts, and security configured within 48 hours. Fusion handled every onboarding without us having to micromanage it.”
PRPriya R.
Operations Director, GTA
CISSP-led leadership
Mike Pearlstein, CISSP, Founder of Fusion Computing
Mike has led IT strategy and security assessments for Canadian businesses since 2012. “In about 80% of the assessments we do, the business is overpaying for something they do not need and underspending on something critical, most often a backup solution that has not been tested in two years.”
Frequently asked questions
An IT assessment is a structured review of how your technology is actually run and what state it is in, scored against public standards rather than opinion. Fusion assesses against ITIL 4 practice areas for service management and CIS Controls Implementation Group 1 for the security floor, then delivers verified registers of what you have, a ranked list of what to fix, and the verified numbers a provider needs to quote support properly.
It is a fixed-fee engagement starting at $3,000 CAD. The price is set by the size of your environment, not by our hours: the entry price covers a small single-tenant, cloud-only environment, and larger estates, extra sites, on-premises servers or additional legal entities add assessment days at a published rate. The 30-minute scoping call is free, the fee is confirmed in writing before any work begins, and it does not move unless you change the scope.
A small environment is about three days of work, with the report following shortly after. Larger environments take longer, and the timeline is stated in the same written scope as the fee, so you know both before anything starts.
The IT assessment asks whether your technology works and what it would cost to run properly: service management, assets, vendors, contracts and spend, with CIS Controls IG1 as a security floor. The cybersecurity assessment asks whether you are safe, going control-by-control against CIS Controls v8.1 and the CCCS baseline with evidence collection and an insurer-ready report. Commission the IT assessment when the question is operations, cost or sourcing; commission the cybersecurity assessment when the question is security, insurance or an audit.
Fusion is a managed service provider, so we will tell you plainly: this assessment produces a scope any provider can bid, including us. Recommendations name the work required, not the vendor who does it, and the transition scope pack is written so you can issue it to three providers and compare the responses on identical terms. The assessment fee is not credited against any resulting agreement, so it stands as paid, independent work.
No. It is a standalone engagement. You can act on the findings with Fusion, hand the report to your existing provider, or build an internal plan. The report is yours to keep either way.
ITIL 4 practice areas for service management capability, and CIS Controls v8.1 Implementation Group 1 for the security floor. Your CyberSecure Canada readiness position is derived from the same fieldwork at no extra cost, and the current-state work maps to the Identify function of the NIST Cybersecurity Framework 2.0, so it can be carried forward if you later need a full CSF programme assessment.
Find out what you actually have
Book a free 30-minute scoping call. Tell us your user count, your sites, and what triggered the review, and we will put a fixed scope and price in writing, usually within one business day. From $3,000.