Michael Hebert finalizes majority acquisition of Castellan Information Security Services advancing Indigenous leadership in cybersecurity and governance, risk, compliance, and preparedness

Michael Hebert, CEO of Turtle Island Technology Solutions, has officially finalized the majority acquisition of Castellan Information Security Services, marking a major step forward in building a national, Indigenous-led cybersecurity and risk advisory ecosystem. Founded in Winnipeg, Castellan has built a strong reputation over the past seven years delivering governance, risk, compliance, and preparedness (GRC-P) advisory services to clients across Canada. Castellan will remain headquartered in Manitoba and continue its commitment to serving clients locally and nationally. This acquisition does not merge operations but instead creates a strategic alignment between Turtle Island Technology Solutions and Castellan Information Security Services. Both organizations will operate independently while seamlessly leveraging each other’s expertise, intellectual property, and delivery capabilities to better serve clients. “This is about more than an acquisition, it’s about what’s possible when Indigenous-led partnerships are built the right way,” said Michael Hebert. “What started as a joint venture built on trust and shared values has grown into something much bigger. Together, we are not only expanding capabilities for our clients, we are helping reshape outcomes and creating real momentum for Indigenous participation and leadership in the technology sector.” Castellan has developed deep experience supporting organizations in the Aerospace and Defence sector, particularly in preparing for the Canadian Program for Cyber Security Certification (CPCSC) requirements. This expertise positions the combined ecosystem to support clients navigating increasingly complex national security and compliance mandates. In addition to CPCSC preparation, Castellan delivers a full suite of GRC-P services, including penetration testing, risk assessments, vulnerability assessments, business continuity, disaster recovery planning, and security program road mapping, helping organizations build resilient, audit-ready environments. Through this alignment, clients will benefit from expanded capabilities, including access to managed detection and response (MDR) services and integrated security solutions, while maintaining the specialized advisory focus that Castellan is known for. As part of this milestone, Castellan Information Security Services is now officially certified by the Canadian Council for Indigenous Business (CCIB), further strengthening its position as a trusted Indigenous-owned provider within Canada’s supplier diversity ecosystem. This milestone reflects continued momentum across the Turtle Island Family of Companies, including Carapace Security Consulting, as they build a comprehensive ecosystem spanning cybersecurity, physical security, cloud, infrastructure, and advisory services. About Castellan Information Security ServicesCastellan Information Security Services is a Winnipeg-based cybersecurity firm specializing in governance, risk, compliance, and preparedness (GRC-P) advisory services. Castellan has deep experience supporting Aerospace and Defence organizations, including CPCSC preparation and compliance readiness, and delivers services such as penetration testing, risk assessments, vulnerability assessments, business continuity and disaster recovery planning, and security program road mapping. About Turtle Island Technology SolutionsTurtle Island Technology Solutions is an Indigenous-owned technology and consulting firm delivering end-to-end solutions across cybersecurity, cloud, infrastructure, and artificial intelligence. Through its family of companies, Turtle Island is committed to advancing Indigenous participation in technology while delivering measurable outcomes for clients nationwide. Media Contact: Jason Winter CRO, Castellan Information Security Services Jason.winter@castellaninformationsecurity.com (902) 417-3777