Frequently Asked Questions
Answers to the questions our clients ask before reaching out.
What's your methodological approach?
Factero draws on internationally recognized IT governance frameworks — NIST-CSF for risk assessment and recommendation prioritization, COBIT for governance structure and alignment of IT investments with business objectives, and ISO 27001 for information security components. The principal associate holds the CISA certification (Certified Information Systems Auditor) from ISACA. In practice, the review goes well beyond invoices: we verify that what you're paying for matches what you have, what you're actually using, and the market price for your type of organization and industry sector. Each finding is translated into a recommendation prioritized by financial impact, enabling leadership to make informed budget decisions.
Do you have experience in our sector?
Factero works primarily with municipalities, SMEs of 10 to 300 employees, and nonprofits across Quebec, Ontario, and New Brunswick. We have completed over 50 mandates in these sectors, including IT budget audits, vendor contract reviews, and market positioning analyses. We've also completed mandates in merger and acquisition contexts for financial firms (IT due diligence). Factero is registered on SEAO (Quebec's electronic tendering system) and the Ontario Tenders Portal, which streamlines procurement processes for public bodies. What varies by sector is the regulatory context — Law 25, municipal accountability requirements, sector-specific compliance frameworks — and the specific governance challenges. Our analytical approach adapts to each context, but the methodological rigor stays the same.
We need to cut our IT budget. Where do we start?
The first step is building a complete picture of your actual IT spending. Many organizations cut what's visible — software licenses, SaaS subscriptions — without touching the managed service contracts or framework agreements that often represent the majority of costs. Factero starts with an exhaustive inventory of all your IT expenses (contracts, invoices, subscriptions, licenses), then identifies three categories: what can disappear without operational risk, what can be renegotiated for better terms, and what shouldn't be touched because it protects critical functions. Each recommendation comes with a plain-language explanation of what it means in practice — no technical jargon, no incomprehensible spreadsheets. The goal is for leadership to make informed budget decisions, even under financial pressure.
How do we know if a cut is risky or not?
That's exactly what Factero documents in the impact analysis by budget line. Some IT expenses are invisible until they're gone — automated backups, emergency access, regulatory compliance licenses, network monitoring tools. Others are habits that accumulated over the years without a real need — licenses for departed employees, subscriptions to unused tools, overlaps between providers. We distinguish between the two categories and present the concrete impact of each potential cut scenario before the decision is made — not after. The analysis uses NIST-CSF and COBIT frameworks to assess the risk level associated with each reduction, enabling you to prioritize safe cuts and protect critical functions.
Are you going to tell us not to cut?
No — if cuts are necessary, Factero helps you make them properly. Our role isn't to defend IT spending or convince you to maintain a high budget. It's to give you a clear, factual picture of what each decision means concretely for your operations, security, and regulatory compliance. Sometimes cutting is the right call — a redundant service, an unused license, an above-market contract. Sometimes what looks unnecessary is protecting a critical function nobody documented — a backup, emergency access, a Law 25 compliance license. You decide — we make sure you have the information needed to do so with full awareness. Our charter of independence guarantees that we have no financial interest in whether your spending goes up or down.
How long does an IT budget audit take?
For an organization of 10 to 100 employees with 1 to 3 main providers, an IT budget audit typically takes 2 to 4 weeks. The exact timeline depends on the volume of contracts to analyze, the number of IT providers involved, and the availability of documentation — invoices from the past 12 to 24 months, active contracts, license and equipment inventories. If documentation is scattered or incomplete, Factero adapts — data collection and reconstruction are an integral part of the mandate. For more complex organizations (150+ employees, 5+ providers, multiple sites), the timeline may extend to 4 to 6 weeks. The final report includes an executive summary for leadership and a detailed technical section with recommendations prioritized by financial impact. A free 20-minute discovery call helps define the scope and estimate the timeline for your specific situation.