The mission is to elevate information security program use and effectiveness in resource challenged businesses.
I help business owners launch or improve information security programs, so effort and investment lead to informed decisions, meaningful risk reduction, and stronger recovery readiness.
Be confident building the right security for your business.

A model of a complete information security program architecture.
Pragmentum is a fully remote, Canadian information security program services consultancy based in Whitby, Ontario. Using a system I developed called TrustHarbor, I focus on helping small and very small businesses establish and maintain information security programs that align with their business objectives, risk exposure, and budget.
I can also help facilitate technical or managed security services or assemble and help you find the right partners, define and control engagements, and ensure you are confident and the program’s structure, oversight, and delivery.

About me

Michael Sumner, CISM
Toronto, ON
Founder, Cyber Security Program Analyst
25+ years IT Business Technology Professional
10+ years Cyber Security Program Analyst
Expert in improved
information security programs
using super-practical governance.
Expertise shaped by hands-on experience, industry standards,
and the accomplished people I have learned from in my career.
FAQs
Who are Pragmentum?
Pragmentum is the information security program governance consultancy through which I provide advisory and delivery services. I bring decades of experience across IT and information security, with a pragmatic, execution-focused approach that helps organizations move from intention to action.
Alongside my own work, I am building a network of experienced business and cybersecurity professionals who operate with certified, standards-aligned practices to support more complex or scaled engagements when required.
What does Pragmentum do?
Pragmentum provides standards aligned information security program guidance and practical support to help small and very small businesses launch, run, and improve their information security programs. This guidance is called TrustHarbor. It includes a free starting point for orientation and self assessment, as well as affordable consulting and program support for organizations that need hands on help.
What is the free starting point?
The free starting point provides a structured way for a business to understand where it stands today. It includes a Trust Assessment, guidance on how to interpret the results, and a clear view of how the information security posture and potential next steps.
The purpose is orientation. It helps owners and managers understand their current level of digital trust, identify material gaps, and decide where further effort or investment makes sense. Many organizations find this alone is enough to clarify priorities, even if no further work follows.
Pragmentum can support your journey to a stronger cyber security defense.