William Néron

William Néron is an IT and cybersecurity expert based in the Quebec City region. At Groupe Miracom, he manages and secures servers and networks for small businesses and supports them day to day in reducing their risk. In the field, he sees the gaps that actually lead to incidents. He brings that hands-on experience to his cybersecurity talks and training, in person or online, so every team knows what to do the very next day. A dedicated runner who covers 10 to 20 km a day, he applies the same discipline to security: small habits, repeated.

There are three talks: “Your business is already a target: what I see in the field” (90 to 120 minutes, for executives and managers), “Law 25 without the jargon: what management really needs to do” (120 minutes, for management and privacy officers) and “Phishing in the age of AI: a live demonstration” (90 to 150 minutes, for the whole team). Each talk is tailored to your audience.

Four formats are available: talk, lunch-and-learn, on-site workshop and executive coaching. They can be delivered in person or online, for a small group of fewer than 20 people or an audience of more than 150.

Small businesses and their teams: executives, managers, privacy officers and employees. No technical knowledge is required. The content is practical and jargon-free, and every participant leaves with simple steps they can apply the very next day.

Yes. Most attacks are automated and go after any organization with a gap, whatever its size. In the field, the most common gaps in small businesses are reused passwords, backups that have never been tested and access that stays active after an employee or vendor leaves. They are also the easiest to fix.

Law 25 is the Quebec law that modernizes the protection of personal information. It applies to any business that collects personal information in Quebec, whatever its size. Among other things, it requires designating a person in charge of protecting personal information (by default, the person with the highest authority in the business), publishing a privacy policy, keeping a register of confidentiality incidents and reporting incidents that present a risk of serious harm to the Commission d’accès à l’information. Its obligations came into force gradually between 2022 and 2024.

Check four clues: the sender’s address (an outside domain imitating an internal department), an urgent or threatening tone, an unusual request such as your banking information or a password, and the real destination of the link, which you can see by hovering over it before clicking. If in doubt, confirm the request another way, for example by calling the person at a number you already know. The “Test your eye” game on this site lets you practise.

Act quickly and without embarrassment: alert your IT lead or IT provider right away, change the affected password from another device and turn on two-factor authentication if it is not already on. If you gave out banking information, call your financial institution. The sooner an incident is reported, the easier it is to limit the damage. This is the focus of the final part of the phishing talk.

Yes. In addition to talks, William supports small-business leaders with a security audit. Each point is explained simply and leads to a clear action plan, sorted by priority. Choose the “Executive coaching” format in the form to discuss it.

Fill out the registration form at the bottom of this page or email reservation [at] williamneron.com. Include your organization, the format you want and the number of participants: William will reply personally with a suggested topic and format.