Who this work is for.
Canadian business owners, marketing teams, product brands and agencies managing websites, campaigns, shared creative accounts and client deliverables.
Review the accounts behind the launch.
Map domain registration, DNS, hosting, CMS, forms, repositories and the creative or campaign platforms in scope. Identify the owner, administrators, external collaborators and recovery contact for each account. Check who can publish, change billing or receive a customer enquiry before defining changes.
Deliver the website with an agreed security baseline.
Scoped implementation can separate deployment credentials, configure the hosting and form protections the selected platform supports, review dependencies and document update ownership. We review where submitted information goes, what is retained and which services can access it. Configuration, deployment review and rollback are agreed before a launch or change.
Protect client assets through collaboration and handoff.
Organise shared folders and review links around the people who need them. Agreed work can limit access to unreleased films, source design files, product references and client records; enable sign-in protections; and document collaborator removal at project close. Public publication and private review use different access arrangements.
Make recovery and day-to-day practice usable.
Training can cover suspicious account requests, publishing approvals, safe file sharing and access handoff. Recovery planning identifies the account owner, backup sources, domain and hosting recovery steps and how to restore the agreed website or asset collection. A practice restore can use a staging site or selected non-production files.
A possible first engagement.
A campaign website and its private review folder.
Review the domain, host, enquiry form and collaborator accounts for a launch. Configure the agreed permissions, keep unpublished campaign assets behind a private review path, confirm who receives form submissions and prepare a documented website rollback and account handoff. Test the agreed visitor and editor flows before release.
Illustrative scope, not a client case study or promised outcome.
What the handoff can include.
- An account, hosting and client-asset map with named owners.
- A prioritised review and roadmap for the agreed launch or production workflow.
- Scoped website, account or sharing configuration with launch and handoff checks.
- Team guidance and a recovery plan for the agreed site and asset collection.
Agree on access, changes and review.
The review can stand alone or lead to an implementation phase. Before access, we agree on the systems and owners, permitted actions, deliverables, price, timing and review steps. Configuration changes need the owner’s approval, a verification plan and a rollback path. The handoff records remaining issues, who maintains the agreed controls and the next review date. Any agreed restore test records the sample, result and unresolved exceptions.
Scope and service boundaries.
The proposal names the websites, platforms, accounts and files included. Configuration and review reduce particular exposures; they do not guarantee that a website or account cannot be compromised. Continuous security monitoring, emergency incident response and penetration testing are not part of the standard service. Hosting support, maintenance and further specialist work are separately scoped.
Prepare the first conversation.
Describe the site or campaign, its platforms, who owns the accounts and how client assets are shared. A public URL and redacted platform list are enough for the first discussion. Do not submit passwords, recovery codes or private client files in the enquiry form.
Based in Sherwood Park, Alberta. Meet locally by appointment or discuss the work remotely across Canada. Confirm language needs and an appropriate secure transfer method before sharing confidential material.
Questions about the engagement.
Can this be included in a new website project?
Yes. The security review, agreed configuration, access handoff and recovery notes can be included in a website scope, or commissioned separately for an existing site.
Do you take over all our accounts?
Access is limited to what the agreed work needs. Your business retains ownership. We name the account owners, required permissions, approval steps and removal of temporary access before implementation.
Useful guidance.
These are public reference resources, not certifications or claimed partnerships. The proposal defines the controls and evaluation included in your project.