Security and privacy has been a focus for John Hersey, director, consulting services at IT services firm CGI since he began his career in 1993 in the area of military information systems security. Since his experience now includes both health care and financial sectors in Canada and the U.S., we contacted him at the company’s Ottawa InfoSec office. His comments were edited for brevity.