- 2010 to 2018:
Ian worked as an IT auditor and then IT audit manager at PwC and the Bidvest Group, with work spanning 80 companies in four countries.
- 2018 to 2023:
As CISO at Bidvest Data, he built the company's information security program from the ground up.
- 2020 to now:
He runs SigOct, doing architecture, software and security work for organizations across South Africa, Canada and the US from Alberta.
Ian has held the CISA certification from ISACA since 2013. He holds a BCom in Information Systems and Business Management, with Honours in Information Systems, from the University of the Witwatersrand.
Where we are
We're based in Beaverlodge, Alberta, and we work with clients across Canada and the US remotely. We're happy to meet in Grande Prairie by arrangement.
Why Sigma Octans
Sigma Octantis is the star that marks the south celestial pole. It is faint, so southern navigators found it by reasoning from the stars around it, and then took their bearings from it. Its constellation, Octans, is named after the octant, a measuring instrument used by navigators. The mark combines sigma and eight, which can be read as a sum, a deviation or a byte. The firm was founded by someone who spent most of his life under that southern sky.
Where to start
If you'd like to talk about your systems, write to us at [email protected].
Questions
Who is Ian Sharland?
Ian is SigOct's founder, and he leads the work himself. He has worked in IT audit since 2010, has served as a CISO, and has held the CISA certification since 2013.
What does SigOct mean?
The name comes from Sigma Octantis, the star that marks the south celestial pole.
Where is SigOct?
We're in Beaverlodge, Alberta, and we work with clients across Canada and the US remotely.
Build receipt
This build copy · 7 pages, 0 violations · PASS links · 75 internal links, 0 broken · PASS tokens · 160 declarations match design-tokens.json · PASS csp · hashed theme, no unsafe-inline, frame-ancestors none · PASS headers · 8 security headers, HSTS 1 year · PASS tls · 139 URLs, 0 plain http · PASS origins · 0 third-party origins, 69 resources · PASS scripts · 2 allowlisted scripts, 0 inline handlers · PASS secrets · 171 files, 0 findings · PASS audit · 488 packages, 0 high or critical advisories · PASS sbom · CycloneDX 1.5, 406 components · PASS licences · 406 components, 0 unknown or disallowed licences · PASS security.txt · RFC 9116, expires 2027-09-24T00:00:00.000Z · PASS cookies · 11 files, 0 cookie writes · PASS weight · home page 96.0 KB in 8 requests, budget 200 KB · PASS CI before main toolchain · node matches .nvmrc · required lint · eslint · required build · receipt checks above · required tests · node --test scripts · required links · internal links · required copy · word budgets and banned strings · required status dates · fleet as-of dates · required output · stray-files · required output · no-http · required output · origins-sri · required output · inline-scripts · required output · headers · required output · csp-lint · required output · security-txt · required visual · self-test on seeded fixtures · required visual · overlap, clearance, connectivity at 360/390/768/1440, animations on · required deps · npm audit high · required deps · osv-scanner lockfile · required deps · lockfile-lint · required deps · licences allowlist · required sast · semgrep · required workflows · actionlint · required workflows · zizmor · required workflows · pins and permissions · required secrets · gitleaks, full git history · required deploy · wrangler pages deploy · required deploy · live headers · required