II.Sector-specific compliance
Compliance anchored in the sector's own requirements — not generic templates
NIS2 and DORA for critical infrastructure and finance, KraftCERT framework for energy, Norwegian FSA guidelines, and equivalent international requirements. We tailor delivery to the client's sector.
Frameworks we work with
- NIS2
Network and Information Security Directive
EU directive for critical infrastructure and digital services
- DORA
Digital Operational Resilience Act
EU regulation for finance sector digital resilience
- KraftCERT
Energy CERT framework
Norwegian framework for incident handling in the energy sector
- Norwegian FSA
Finanstilsynet guidelines
Norwegian supervisory expectations for financial institutions
- ISO 27001
Information security management
International standard for information security
What you receive
- 01Gap analysis against relevant regulatory requirements
- 02Prioritized action plan with ownership and time horizon
- 03Documentation structured for supervisory review
- 04Follow-up assessment that builds on prior work