Movahedi Solutions

Self-Assessments

1000823315 ONTARIO INC., operating as Movahedi Solutions, Mississauga, Ontario, Canada. Contact: mohammad@movahedi.ca. Each document below is a self-assessment. Each is labelled in its title and first paragraph exactly as a self-assessment, not a certification, not an audit, and not a third-party verification. The four main assessments together cover 32 main sections. Each one states what the company does, with evidence, dates, and links, and states what is confirmed per engagement. Three further self-assessments are listed below the first four: CAIQ-Lite, the NIST CSF matrix, and the CIS Controls v8 and MVSP alignment. Related checks: DNS and SSL Checks, October 28, 2026, with SPF, DKIM, DMARC, mail routing, and SSL Labs grade A.

Last updated: October 28, 2026
Back to the Trust Center
Documents

Privacy Self-Assessment: PIPEDA Principles and Quebec Law 25

Dated October 27, 2026. 8 main sections plus 18 subsections, 26 headed sections in total: 7 services, all 10 PIPEDA principles, 8 Quebec Law 25 topics, client-data rules, registrations dated October 27, 2026, and founder personal credentials only. Read it: Privacy Self-Assessment.

AI Governance Self-Assessment: NIST AI Risk Management Framework

Dated October 27, 2026. 8 main sections: 7 services, NIST AI Risk Management Framework Govern, Map, Measure, Manage, in plain language, advisory practice only, not an audit of a client system, EU AI Act readiness support only. Read it: AI Governance Self-Assessment.

Cybersecurity Self-Assessment: NIST Cybersecurity Framework

Dated October 28, 2026. 9 main sections: NIST Cybersecurity Framework Govern, Identify, Protect, Detect, Respond, Recover, public site and engagements, HTTPS through Cloudflare, GitHub build and deploy, Security Headers header scan A+ on October 28, 2026, at 00:59 UTC, labelled as a header scan only. Read it: Cybersecurity Self-Assessment.

CAIQ-Lite Self-Assessment

Dated October 28, 2026. 16 control domains, 32 questions in this document (2 per domain). Answers: Yes 28, Inherited 1, Not applicable 2, no claim made 1. Labelled exactly as a self-assessment, not a CSA assessment or certification. Lite scope is reported as 73 questions by CSA and Whistic sources (one secondary source said 71); this document does not reproduce proprietary template text, it uses the domain structure with original question wording. Evidence links to the Security Headers scan and the SSL Labs results. Read it: CAIQ-Lite Self-Assessment.

NIST CSF Matrix Self-Assessment

Dated October 28, 2026. 18 rows across 6 functions: Govern 3, Identify 3, Protect 4, Detect 2, Respond 3, Recover 3. Status: Verified 13, Partially verified 5. This is the concise one-page matrix of the same assessment as the narrative Cybersecurity Self-Assessment, on the same evidence, not a separate assessment with different evidence. Read it: NIST CSF Matrix Self-Assessment.

CIS Controls v8 and MVSP Alignment

Dated October 28, 2026. Verified alignment items 16 total: 10 CIS Controls v8 at control level (Controls 1, 2, 3, 4, 5, 6, 9, 11, 15, 17) and 6 MVSP items (vulnerability reports, self-assessment, subprocessor list, HTTPS only, security headers, encryption in transit). Labelled as an alignment statement and a self-assessment, not an audit, certification, or third-party verification. Read it: CIS Controls v8 and MVSP Alignment.

Website Accessibility and Privacy Self-Assessment (Self-Check): movahedi.ca

Dated October 28, 2026. 7 main sections: live site check on October 28, 2026, homepage and services page, 21 tools, 333-term bilingual glossary, daily insight in English and Quebec French, most tools running in the visitor browser, free tools running entirely in the browser with no account, no tracking, and no sales call for those tools, Website Privacy Policy dated October 29, 2026. Read it: Website Accessibility and Privacy Self-Check.

How to use these self-assessments

How this works. A buyer picks the self-assessment that matches their question, reads the plain-language section for that topic, follows its evidence links, and, where the question is engagement-specific, sends a tailored request naming the questionnaire and the deadline. The tailored response is then prepared for that engagement.

Scope and limits, stated briefly

These pages are company information. Where a matter is to be confirmed per engagement, it is stated as such, and it is confirmed in writing for that engagement before work starts. Contact: mohammad@movahedi.ca.