Information Security Services

Turn information security requirements into a way of working

NIS2 and ISO 27001 ask for more than policies. Cerivo Information Security Services helps you understand your risks, establish clear ownership and close the gaps, with specialist support across ISMS, risk assessments and audit preparation.

Talk to our Information Security team

Where do you start with NIS2 and ISO 27001?

Which requirements apply?

Where are the biggest gaps?

What needs to be fixed first?

How do you prove the right controls are in place?

We start with your organisation as it is today.

Then we build a practical path forward, based on the requirements that apply to you, your risk profile and your resources.

How we can help

NIS2 compliance

Get support across the full journey from initial gap analysis to implementation and ongoing operations.

We can assess your existing governance, policies, responsibilities and security measures, identify the most important gaps and help put the required structure in place.

ISO 27001 implementation

Build the structures, processes and documentation needed to work towards ISO 27001.

Our specialists have hands-on ISMS experience and help turn the standard into a manageable way of working.

Risk assessments and ISMS

Build a structured approach to information security risks and management systems.

We help establish governance, risk assessments, responsibilities, policies and procedures so information security becomes part of everyday operations.

ISAE 3402 preparation

Prepare for ISAE 3402 with support from specialists who understand both the requirements and the work needed to get your organisation ready.

From gap analysis to ongoing operations

Our approach gives you a clear path through the work.

  1. 01

    Gap analysis

    We map your current setup against the requirements that apply.

  2. 02

    Roadmap

    We prioritise the work based on risk, resources and timing.

  3. 03

    Implementation

    We help build governance, risk management, incident and supplier processes, policies, training and documentation.

  4. 04

    Ongoing support

    Our Managed Services team helps you maintain the work and stay audit-ready.

    Managed Services

Compliance you can prove

Information security isn't just about putting controls in place. You also need to be able to show what you're doing.

The Cerivo Platform supports the work throughout the process, keeping documentation, responsibilities and progress connected.

That gives your team a clearer overview and makes it easier to maintain the work over time.

The specialists behind your information security work

Information Security Services is led by Jakob Krabbe Sørensen, Head of Legal Product & Senior Advisor.

A lawyer and Cerivo's go-to NIS2 specialist, Jakob has experience across ISO/ISMS and GDPR and is a certified ISO Internal Auditor with more than five years in compliance.

Simon Ropstad Nielsen and Frederik Them Pedersen also work on our information security projects, connecting them with Managed Services and Legal Services.

Meet the team

Know where you stand. Act on what matters.