A Program on Paper Is Not a Program. That's Why Cybertivité Exists.
I'm Serge El-Hage, founder of Cybertivité. For more than ten years I have helped organizations in Quebec, across Canada and internationally strengthen their security posture and their ability to keep operating through disruption, first in advisory roles at KPMG and CGI, then inside large organizations. Before that, I served six years in the Canadian Armed Forces, where I learned that a plan is only as good as its last test.
That experience taught me the difference between a program that exists in a binder and one that works under pressure. Cybertivité was built to deliver the second kind: practical, tested and proven.
I hold a Bachelor of Business Administration with honours, specialized in Corporate Cybersecurity Management, and a Master's degree in Computer Engineering, specialized in Cybersecurity Strategy and Organizational Resilience. I am a Certified Business Continuity Professional (CBCP) and am currently completing the CRISC and PMP certifications. I also teach information security at the college level and mentor emerging cybersecurity professionals.
Education
Certifications
Organizations I have worked with and for
Three Lessons from a Career in Security and Resilience.
People Work with People They Trust.
We're transparent about findings, honest about trade-offs and accountable for what we deliver.
Every Stakeholder Needs to Be Heard.
Good programs reflect how your operations really work, so we start with your teams, not a template.
Results Have to Hold Up.
We translate complex topics into clear decisions, and measure success by what works under pressure.
Our mission
To help organizations protect what they can't afford to lose, by building cybersecurity and resilience programs that are practical, tested and proven, not just documented.
Our vision
To be the benchmark for quality in security and resilience consulting, raising the bar so that every organization we work with sees us as a trusted, long-term partner, not just a provider.
What Clients and Colleagues Say
Some quotes are translated from French and lightly edited for length.
Serge is extremely professional, knowledgeable and a pleasure to work with. On tabletop exercises for our international and local Capital Markets offices, he consistently showed a strong command of the subject and a proactive approach to planning and execution. His expertise and attention to detail have made our exercises more engaging, realistic and impactful, and helped elevate the overall maturity of our tabletop exercise program.
“Serge’s expertise and professionalism ensured the success of the project. He was a true pillar for the team, and his positive impact is undeniable. Congratulations, and thank you for this remarkable work!”
“It was a real pleasure to work with Serge on our training content. I particularly appreciated his commitment and remarkable availability, always ready to adjust the content and keep the work on schedule. His approach of adapting the format for a non-expert audience was especially valuable, and his contribution was a key factor in the success of this initiative.”
“Serge’s rigorous, highly visual and high-quality work on our application security training produced structured, impactful content. Thanks to his commitment and expertise, the project goes beyond a single training: it opens the way to a particularly attractive service offering for our clients. His professionalism and attention to detail make all the difference.”
“In just a few hours, Serge immersed himself in the client’s context and took over the project to deliver the business continuity plan, earning praise from the client, who greatly appreciated his efficiency and quick thinking.”
“Serge quickly took charge of the client’s request for a cybersecurity vault recommendation. He produced a solid structure, conducted in-depth research and brought forward relevant insights. His follow-up and speed of execution were highly appreciated by both the team and the client.”
“Serge is a key resource. He is very organized, structured and coordinated in his follow-ups, deliverables and project management, keeping roadmaps and project presentations up to date. He has an uncanny ability to create concise, visually appealing and representative deliverables.”
Frequently Asked Questions
Who Do You Work With?
Mid-size and large organizations, including financial institutions, transportation and logistics operators, public bodies and technology companies. We work directly with security, risk, operations and internal audit teams.
How Do Engagements Work?
As a fixed-scope project, an ongoing retainer, or an interim leadership role. Every engagement starts with a scoping call and a written proposal with clear deliverables, timelines and fees.
Which Standards and Frameworks Do You Use?
ISO 22301:2019 and DRI International professional practices for resilience; NIST CSF 2.0, ISO/IEC 27001:2022 and CIS Controls v8 for cybersecurity. We adapt to the framework your organization or regulator already uses.
Can You Assess Our Third-Party Providers?
Yes. Our third-party resilience assurance verifies that partners' contractual commitments are backed by tested capability. We disclose any prior relationship with an assessed party and assign independent assessors where needed.
How Do You Handle Our Confidential Information?
We sign your non-disclosure agreement before any sensitive information is shared. In most engagements, we work directly inside your network on a laptop you provide, so your data stays in your environment. Any documents we do receive are used only for the engagement, stored securely, and returned or deleted at the end unless you ask us to keep them.
Do You Work in French and English?
Yes. All services, workshops and deliverables are available in both languages.
Ready to See How Your Program Holds Up?
Tell us about your organization and what you need to prove. I’ll get back to you personally.
What Happens Next
- We reply within one business day.
- A 30-minute scoping call. We can sign your NDA beforehand.
- A written proposal with deliverables, timeline and fees.