NIS2 Advisory

We assist companies and organizations in preparing for and meeting the requirements of the NIS2 Directive and its implementation into Icelandic law. With decades of experience in information security, risk management, and regulatory compliance, we support companies and public institutions in strengthening their resilience against cyber threats and meeting increased legal requirements.

Our NIS2-related advisory work focuses on helping companies understand their obligations under the directive, assess the current state of information security, and implement the controls, processes, and procedures necessary to meet the requirements.

Our services include, among other things

• Assessing the current state of information security
• Gap analysis against NIS2 requirements to identify areas for improvement
• Developing an action plan and roadmap toward compliance
• Implementing information security risk management
• Developing processes for incident handling and reporting obligations
• Building incident response and business continuity plans
• Developing security requirements for supplier relationships and service agreements
• Implementing access control and authentication processes
• Employee training and security awareness
• Internal controls and regular security status assessments

Gap analysis and action plan for NIS2

An important part of our advisory work is conducting a gap analysis, where the current governance structure, processes, and security measures are assessed against NIS2 requirements. Based on this assessment, we present a clear and actionable plan that guides the organization toward compliance.

Integration with ISO/IEC 27001

Many of the NIS2 requirements relate to the governance and organization of information security. These can often be met through the implementation of an information security management system based on ISO/IEC 27001. We help organizations design and implement such a management system so that it supports both NIS2 compliance and strengthens overall information security governance in the long term.

CISO as a Service (vCISO)

We also offer a service where we take on the role of a virtual CISO (vCISO). In this service, we support executives and boards with strategy, risk management, and ongoing oversight of information security, ensuring that cybersecurity governance is purposeful and compliant with laws and regulations.

< Back