About Us

Svavar Ingi Hermannsson leads our consulting services and has more than 30 years of experience in cybersecurity and information security. In his work, he helps companies and public institutions build robust security capabilities, manage digital risks, and comply with legal, regulatory, and international standards.

 

Svavar has extensive experience in implementing Information Security Management Systems (ISMS) based on ISO/IEC 27001, as well as advising organizations on data protection, payment card industry security requirements, and regulatory expectations in the financial sector. He has assisted numerous organizations in strengthening their security governance, developing policies and procedures, and preparing for audits and certifications.

 

He also has significant hands-on experience with penetration testing, vulnerability assessments, and technical security reviews, with the goal of identifying weaknesses before they can be exploited and helping executives make informed decisions about risk management.

 

In addition to his consulting work, Svavar has taught information security at the University of Iceland and Reykjavik University, and has delivered presentations at international conferences and events such as OWASP, ISC2 Secure Summits, BSides, and Hacker Halted Europe. He has also been invited to speak at conferences across Europe, the United States, and the Middle East.

 

Svavar holds a Master of Science in Cybersecurity from the Georgia Institute of Technology and an Executive MBA from Reykjavik University. He has also completed executive education programs at Harvard University and the University of Oxford.

 

He is a lifetime member of OWASP and holds several internationally recognized security certifications, including:

• ​ISO/IEC 27001 Lead Auditor

• CISSP – Certified Information Systems Security Professional

• CISA – Certified Information Systems Auditor

• CISM – Certified Information Security Manager

• CDPSE – Certified Data Privacy Solutions Engineer

• GDSA – GIAC Defensible Security Architecture