Your biggest client just got regulated. Are you ready?
Since Cybersäkerhetslagen entered force in January 2026, NIS2-regulated entities must impose cybersecurity requirements on their suppliers. If you supply to energy, healthcare, transport, or financial services — you need to demonstrate formal security practices. We help you get compliant using the Microsoft 365 tools you already pay for.
Implement risk assessment processes using Microsoft Secure Score and Defender Vulnerability Management.
Establish incident detection and 24-hour reporting procedures with Defender XDR and Sentinel.
Ensure backup and recovery capabilities via OneDrive, SharePoint, and Azure disaster recovery.
Manage third-party access with Entra ID B2B collaboration and guest access policies.
Deploy Conditional Access policies, FIDO2 keys, and multi-factor authentication across your organization.
Automate patch management with Windows Update for Business and Intune compliance policies.
From 35,000 SEK — Fixed price based on organization size and scope. No hourly billing.
Typically engaged by companies with 5–200 employees that supply to regulated industries and use Microsoft 365.
Probably not if you have fewer than 50 employees. But if you supply to a company that IS regulated, they will impose security requirements on you through contracts and questionnaires. That is the supply chain cascade effect.
Read-only access via a temporary Security Reader role in Entra ID. We never make changes to your environment during the assessment.
Microsoft 365 Business Premium and E3/E5 include most of the tools needed for NIS2 compliance. The gap is usually configuration, not licensing. We help you configure what you already have.
Typically 2–3 weeks from kickoff to debrief. The technical review takes 1–2 weeks.
Yes. NIS2 and ISO 27001 overlap significantly. Our alignment package maps both frameworks simultaneously so you do not duplicate effort.