actually. | The Actually Brief https://actuallyknow.com/insights Plain language answers to the technology questions leaders actually ask. en-CA How do I check our security tools are installed, reporting and monitored? https://actuallyknow.com/insights/check-security-tools-are-monitored https://actuallyknow.com/insights/check-security-tools-are-monitored Mon, 02 Nov 2026 00:00:00 GMT Ask your IT provider for a device-by-device record of endpoint security coverage, recent check-ins and who reviews alerts, then record what each reply establishes. Ask Actually Bill 194 and EDSTA: does Ontario's cyber regulation apply to my organisation? https://actuallyknow.com/insights/ontario-edsta-cyber-regulation-check https://actuallyknow.com/insights/ontario-edsta-cyber-regulation-check Mon, 26 Oct 2026 00:00:00 GMT Check whether O. Reg. 51/26 under EDSTA lists your organisation, then ask your IT provider what contact, assessment and incident records it can supply. Ask Actually How to answer a client security questionnaire when your IT provider holds the answers https://actuallyknow.com/insights/answer-client-security-questionnaire https://actuallyknow.com/insights/answer-client-security-questionnaire Mon, 19 Oct 2026 00:00:00 GMT Sort each answer in a customer security questionnaire into what your IT provider reports, what records you hold and what is unknown, then word exceptions honestly. Ask Actually How do I check a former employee's access was removed? https://actuallyknow.com/insights/check-former-employee-access-removal https://actuallyknow.com/insights/check-former-employee-access-removal Mon, 05 Oct 2026 00:00:00 GMT A plain request for offboarding records from your IT provider, how to record each reply, what those records can and cannot establish, and what to decide next. Ask Actually Who reports a breach when your IT provider caused it? https://actuallyknow.com/insights/provider-caused-breach-reporting-responsibility https://actuallyknow.com/insights/provider-caused-breach-reporting-responsibility Tue, 29 Sep 2026 00:00:00 GMT After an incident on provider-managed systems, ask for a written timeline, confirm who handles breach reporting, and record what the provider states and supplies. Ask Actually How to chair your own quarterly review with your IT provider https://actuallyknow.com/insights/chair-quarterly-it-provider-review https://actuallyknow.com/insights/chair-quarterly-it-provider-review Mon, 14 Sep 2026 00:00:00 GMT Set the agenda for a quarterly review with your managed IT provider: what evidence to request first, how to record replies, and what each record can and cannot establish. Ask Actually What Evidence Cyber Insurers Ask For https://actuallyknow.com/insights/evidence-cyber-insurers-ask-ontario https://actuallyknow.com/insights/evidence-cyber-insurers-ask-ontario Mon, 07 Sep 2026 00:00:00 GMT Review examples of evidence for a cyber insurance questionnaire: MFA, backups, endpoints and training. Match requests to your actual insurer's requirements. Ask Actually What Your MSP Monthly Report Should Show https://actuallyknow.com/insights/msp-monthly-report https://actuallyknow.com/insights/msp-monthly-report Sun, 06 Sep 2026 00:00:00 GMT An MSP monthly report should compare the agreed service with evidence of delivery: what changed, what is at risk, which actions are open, what needs a decision. Ask Actually How Often Should Backups Be Tested? https://actuallyknow.com/insights/how-often-backups-tested https://actuallyknow.com/insights/how-often-backups-tested Sun, 06 Sep 2026 00:00:00 GMT How to choose a backup testing schedule, read a restore report and identify what remains untested. Practical questions for your IT provider. Actually Explained Who Owns Your Microsoft 365 Tenant? https://actuallyknow.com/insights/who-owns-microsoft-365-tenant https://actuallyknow.com/insights/who-owns-microsoft-365-tenant Sun, 06 Sep 2026 00:00:00 GMT An admin role does not make your IT provider the owner of your Microsoft 365 tenant. How to check who can act for your business, and what to put in writing. Ask Actually