NIS2

We help organizations prepare for and comply with the requirements of the NIS2 Directive and its implementation into Icelandic law. With decades of experience in cybersecurity, risk management, and regulatory compliance, we support companies and public institutions in strengthening their resilience against cyber threats while meeting evolving regulatory obligations.

Our NIS2 consulting services focus on helping organizations understand their obligations, assess their current level of security maturity, and implement the governance, processes, and controls required by the directive.

Our services include

Assessment of your organization’s current cybersecurity posture
NIS2 gap analysis to identify areas requiring improvement
Development of a structured action plan and compliance roadmap
Implementation of information security risk management processes
Development of incident management and breach notification procedures
Establishment of business continuity and incident response plans
Security requirements for suppliers and third-party service providers
Implementation of identity and access management controls
Security awareness and training programs for employees
Internal security reviews and regular security posture assessments

NIS2 Gap Analysis and Compliance Roadmap

A key part of our service is conducting a structured NIS2 gap analysis, where we evaluate your current information security practices against the requirements of the directive. Based on this assessment, we develop a clear and practical roadmap that enables your organization to reach compliance in a structured and efficient manner.

Integration with ISO/IEC 27001

Many of the governance and security requirements introduced by NIS2 can be effectively addressed through the implementation of an Information Security Management System (ISMS) aligned with ISO/IEC 27001. We assist organizations in designing and implementing such systems, ensuring that compliance efforts support long-term security governance and operational resilience.

Virtual CISO (vCISO)

We also offer a Virtual Chief Information Security Officer (vCISO) service. In this role, we support executive management and boards in overseeing cybersecurity strategy, risk management, and regulatory compliance, ensuring that information security is managed effectively at the leadership level.

< Back