CGI Inc. runs IT and cybersecurity projects for Canadian federal agencies and French-speaking European multinationals, routing all of that work through a single pool of senior consultants based in Montreal who hold active government security clearances and speak both French and English. Those clearances are granted to the individuals themselves rather than to CGI as a firm, so if a client tries to switch vendors, the clearances stay with the departing consultants and the incoming firm has to wait years while its own staff clear vetting from scratch — a delay that most clients on live ERP or cybersecurity projects cannot afford. The bilingual French-English fluency that Quebec workplace law and European clients both require comes from the same Montreal talent pool, which means the offshore delivery centres CGI runs in India and Eastern Europe can absorb standardized development work but cannot substitute for the cleared, bilingual senior layer. Because that layer cannot be grown faster than Canadian immigration and security-vetting timelines allow, any policy change that restricts bilingual technical workers reaching Montreal would shrink the pool that holds the whole model together.
How does this company make money?
The company charges hourly or daily consulting fees for digital transformation work. It also signs fixed-price contracts for systems integration projects that run 2-5 years. Clients pay recurring monthly fees for managed IT infrastructure services the company runs on their behalf. On top of that, the company earns commissions when clients deploy enterprise software platforms like Oracle and SAP through its engagements.
What makes this company hard to replace?
Security clearances held by the embedded consultants belong to those individuals and cannot be handed to a new vendor — a switching client would have to accept years of vetting delay before a replacement team could fully operate. Multi-year ERP projects make switching cost millions of dollars in overlap and rework. Integrated cybersecurity monitoring systems require 6-12 months of parallel operation during any vendor transition, creating a window of real operational risk that most clients are unwilling to accept.
What limits this company?
Security clearances can only be granted to people who have passed a years-long vetting process, and that process cannot be sped up or handed off to workers in another country. Every new government contract that needs cleared staff draws from the same small pool of bilingual Montrealers. The company can sign contracts faster than it can produce the people those contracts require.
What does this company depend on?
The company cannot operate without Canadian work permits and security clearances for its technical staff, Microsoft Azure and AWS cloud platforms, Oracle and SAP software licensing agreements, Canadian government procurement qualification status, and the submarine fiber optic cables that connect its Montreal offices to offshore development centers in India and Eastern Europe.
Who depends on this company?
Canadian federal agencies rely on its cybersecurity monitoring — if ongoing digital transformation programs stopped mid-way, those agencies would lose active security coverage. European financial services clients would face gaps in regulatory compliance if their ERP integrations were abandoned partway through. Telecommunications companies running managed services through the company would see network management systems fail if those services were cut off.
How does this company scale?
Offshore development work in India and Eastern Europe can grow relatively cheaply by adding capacity through standardized delivery methods. But the part of the business that serves Canadian government clients and French-speaking European clients cannot scale the same way — those relationships require cleared, bilingual Montreal-based senior consultants who cannot be replaced by offshore staff or automation.
What external forces can significantly affect this company?
Canadian-EU trade agreement rules govern how data can move across borders for European client work, so any change to those rules directly affects delivery. Quebec's French language workplace regulations require bilingual teams on every engagement. Shifts in the CAD-USD exchange rate change how cost-competitive Montreal-based delivery looks compared to US rivals bidding on the same contracts.
Where is this company structurally vulnerable?
If Canadian federal rules tightened the criteria for granting security clearances, or if Quebec immigration rules reduced the flow of bilingual technical workers into Montreal, the cleared bilingual talent pool would shrink. Once that pool shrinks, the company can no longer staff new government contracts or hold its position against competitors — the core advantage dissolves.