Edmonton IT Support, Managed IT and Cybersecurity

Many Edmonton organizations sit in the second or third row of this table, or do contract work for someone who does: the city is the seat of the provincial government and home to the University of Alberta, major hospitals and a large research community. The law decides who you must tell after a breach, and how quickly, so we settle it before we design anything else. The OIPC publishes the breach forms and assessment tools for each Alberta law.

Physicians, chiropractors, registered nurses and the other custodians named under the Health Information Act work to a different breach rule from private businesses. A custodian must give notice as soon as practicable of a loss of, unauthorized access to or disclosure of individually identifying health information where there is a risk of harm, and the notice goes in writing to the affected individuals, the Commissioner and the Minister (Government of Alberta). The test is 'risk of harm' rather than PIPA's 'real risk of significant harm', and the custodian makes the assessment using the factors in section 8.1 of the Health Information Regulation.

The Act also reaches your suppliers. A person who performs a service for a custodian under a contract is an affiliate, in the same way as a receptionist or records clerk, so the clinic stays answerable for how its IT provider handles health information.

In a clinic the incidents that trigger notice are rarely dramatic: a front-desk mailbox taken over through a phishing link, a laptop lost without encryption, a chart export emailed to the wrong address. The controls follow from that. Encrypt every device, put multi-factor authentication on every mailbox and remote-access tool, keep audit logs long enough to answer 'was it opened?', and teach staff to call before they delete anything. See IT support for healthcare and for dental practices.

Since June 11, 2025, Alberta's public bodies have worked under the Protection of Privacy Act, which replaced the privacy part of FOIP (OIPC Alberta). It covers ministries, agencies, boards and commissions, school boards, universities and colleges, municipalities and municipal police services. When a breach creates a real risk of significant harm, a public body must notify the affected individuals, the Commissioner and the Minister, and its privacy management program requirements apply from June 11, 2026.

If you are a consultant, software vendor, engineering firm or contractor handling a public body's information, expect those obligations to reach you through the contract: security questionnaires, clauses requiring prompt notice of any incident, and questions about where data is stored and who can see it. We help suppliers answer those questions accurately and then make the answers true, with access reviews, logging, encryption, a written incident procedure and evidence you can attach. See vendor privacy reviews and privacy impact assessments.

Northeast of the city, Alberta's Industrial Heartland takes in Fort Saskatchewan and the counties of Lamont, Strathcona and Sturgeon, and the province describes the Edmonton Metropolitan Region as Canada's largest hydrocarbon processing region (Government of Alberta). To the south, Leduc County says the Nisku Business Park is home to more than 800 businesses in energy, food processing, transportation and logistics and advanced manufacturing, alongside Edmonton International Airport.

The suppliers, fabricators and service companies around these sites run IT that looks nothing like a downtown office: a shared PC on the shop floor, tablets in service trucks, a site trailer on a cellular connection, and a front office running estimating, payroll and Microsoft 365. Our work is the business side of these companies, not the control systems that run a plant. We make sure a shared terminal has its own limited account, a stolen tablet can be wiped, a contractor's access ends when the job does, and the office can keep invoicing when a site link drops.

See IT for construction, manufacturing and logistics and warehousing.

Edmonton is home to Amii, the Alberta Machine Intelligence Institute, one of Canada's three national AI institutes under the Pan-Canadian AI Strategy. Whether or not your organization builds AI, your staff already use it: pasting text into chat assistants, switching on Copilot, connecting note-taking bots to Teams meetings.

The privacy question is the one PIPA, the HIA and POPA already ask: is personal information collected, used or disclosed only for purposes people were told about, and is it protected? Copilot shows a user whatever that user can already open, so before it goes live we look for the overshared HR folder or client archive nobody cleaned up. See Copilot readiness and AI governance.

Alberta did not turn its clocks back on November 1, 2026, and now stays on Alberta Time, UTC-6, all year (Government of Alberta). Microsoft added a new Windows and Outlook time zone for it, (UTC-06:00) Mountain Time (Alberta), and says existing calendar events do not move to it automatically (Microsoft KB 5134344).

For clinics, booking-driven businesses and anyone running scheduled automation, the risk is an hour of silent error: appointment reminders sent for the wrong time, a Power Automate flow or Azure Automation job that Microsoft says drifts by an hour while it uses a US Mountain time zone, or a meeting-room screen that runs an hour behind. We update devices, move calendars to the new zone, re-time scheduled jobs, and test with real bookings rather than assume every vendor got it right.

Alberta's grid has had close calls. On January 13, 2024, during a week-long cold snap below -40°C, the province's emergency alert system was used to ask Albertans to cut their power use (Market Surveillance Administrator), and on April 5, 2024 a grid alert led to brief rotating outages across the province (AESO).

A short outage is a nuisance for an organization whose files and phones live in Microsoft 365, and a real problem for one whose server, phone system and internet router share a closet with no battery backup. We check that a UPS can shut servers and network gear down cleanly, that backups sit somewhere other than the building, and that staff can carry on from a phone hotspot when the office connection cannot. See backup and disaster recovery.

Remote support does not depend on a postal code. A head office downtown, a branch in St. Albert or Sherwood Park and a yard in Acheson or Nisku get the same service: the same helpdesk, the same patching and security controls, and the same 24/7 incident line, (289) 582-9930.

Our team works from Vaughan, Ontario, one hour ahead of Edmonton from November to March and two hours ahead from March to November. Hands-on work such as cabling, a hardware swap or an office move is planned per engagement and written into the agreement: what we ship pre-configured, what your staff can do with us on a video call, and what needs someone on site and how that is arranged. We do not promise on-site response times in Alberta.

Organizations with offices in both Alberta cities, or in Alberta and Ontario, can run on one agreement. See IT support in Calgary and managed IT across Canada.

1. 01

   Map the information

   Which law applies to which records (PIPA, the HIA, POPA or PIPEDA), where those records live, and who can reach them.

2. 02

   Close the obvious doors

   Multi-factor authentication everywhere, separate administrator accounts, stale and contractor accounts removed, devices encrypted and enrolled.

3. 03

   Prove recovery and logging

   A dated restore test, audit logs kept long enough to show what was accessed, and SPF, DKIM and DMARC on your domain.

4. 04

   Write the breach procedure

   Who calls the incident line, who decides on notice with counsel, and which OIPC form you would file. Start with an IT health check.