CGI Group Cybersecurity logo

CGI Cybersecurity

How we evaluate providers

Visit Website

Provider Snapshot

Core services
Security Operations Center as a Service (SOCaaS), Threat Intelligence, Identity & Access Management (IAM) +4 more
Platforms
Splunk, Microsoft Sentinel, IBM QRadar +1 more
Client focus
Enterprise (1000+)
Response SLA
30 minutes
Website
cgi.com

CGI Cybersecurity operates five security operations centers located in Canada, the US, the UK, Sweden and Australia, delivering SOCaaS, Threat Intelligence, Incident Response and Cloud Security on Splunk, Microsoft Sentinel, IBM QRadar and CrowdStrike. Its enterprise industries are Government & Public Sector, Defense & Aerospace, Financial Services, Healthcare, Energy & Utilities and Manufacturing, and it is FedRAMP Authorized with a response commitment of 30 minutes.

Company Details

Headquarters
Montreal, Quebec, Canada
Founded
1976
Employees
1000+
SOCs
5
Response SLA
30 minutes

Pricing

Pricing Model
Custom
Starting Price
Custom quote

About CGI Cybersecurity

CGI Group is one of the largest independent IT and business consulting services firms in the world, with 90,000+ professionals and operations in 40+ countries. Their cybersecurity practice delivers managed security services, SOC operations, threat intelligence, incident response, and identity management to federal governments, defense agencies, utilities, and commercial enterprises. CGI's strength lies in their long-standing relationships with public sector organizations across Canada, the US, UK, Sweden, and Australia — where they manage critical government IT systems with embedded security operations. Their Managed Cyber Defense services combine threat monitoring, automated response, and human analyst expertise backed by a global network of security operations centers. CGI is recognized by Gartner and IDC as a leader in government technology services, with security services integrated across their broader managed IT engagements.

Manage or promote this profile

Represent this provider? Claim the profile to verify your affiliation and request updates, get Featured placement, or become a Top Provider. All three start on the For Providers page.

Get started on For Providers

Industries Served

CGI Cybersecurity has experience serving 6 industries, including the regulatory requirements and security challenges unique to each.

Supported Platforms

CGI Cybersecurity supports 4 security platforms. MSSPs with hands-on experience in your tools can onboard faster and tune detections more accurately.

Client Company Sizes

CGI Cybersecurity serves Enterprise (1000+) organizations. Providers focused on your company size tend to offer pricing and service levels that match your budget and team capacity.

Compliance Frameworks Supported

CGI Cybersecurity provides compliance support for 8 frameworks. Compliance support typically includes control mapping, evidence collection, audit preparation, and ongoing monitoring to keep you audit-ready year-round.

SOC 2HIPAAPCI DSSGDPRISO 27001FedRAMPFISMANIST CSF

Certifications Held

CGI Cybersecurity holds 3 certifications. Each certification means the provider passed an independent audit of their security practices, operations, or technical skills.

ISO 27001SOC 2 Type IIFedRAMP Authorized

CGI Cybersecurity Categories and Capabilities

These comparisons and profile attributes are based only on listed services, customer fit, technology support, and verified research data.

Regions served

  • Europe
  • Global

Verified capabilities

  • 24/7 Monitoring
  • Managed Detection & Response
  • Threat Hunting
  • Incident Response Retainer
  • Vulnerability Management
  • Cloud Security
  • Network Security
  • Compliance Services
  • SOC as a Service
  • DFIR Services

Technology integrations

  • Splunk Enterprise Security
  • AWS
  • Google Cloud Platform
  • Microsoft Azure
  • CyberArk
  • Cisco Firepower
  • Tenable Nessus

What Should You Ask When Evaluating CGI Cybersecurity?

Before engaging any MSSP, use these questions to assess whether the provider is the right fit for your organization. These apply to CGI Cybersecurity and any other provider on your shortlist.

  • What is included in the base service vs. what costs extra? Clarify whether incident response, compliance reporting, and additional log source onboarding are included or billed separately.
  • What response actions does the provider take directly? Some MSSPs only send alerts for your team to act on. Others take containment actions like host isolation or account lockout on your behalf.
  • What does the onboarding process look like? Ask about typical onboarding timelines, how much work your team needs to put in, and when full monitoring coverage goes live.
  • Can you provide references from similar organizations? Ask for references from companies in your industry and size segment. The experience of similar organizations is the best predictor of how the MSSP will perform for you.
  • What happens if we need to switch providers? Understand data portability, contract termination terms, and transition support. A transparent exit process is a sign of a provider that prioritizes long-term trust over lock-in.

Market Context

Selected insights from 404 MSSPs in our dataset