IT and information security consultant in Malmö
Kristensson i Skåne AB works with organisations in Malmö on information security, data protection and IT — from requirements and governance to technical implementation and operations.
What characterises Malmö
Malmö is the region’s finance and technology city, and that shows in which requirements land on the organisations here. Banks, insurers, payment providers and fund managers have been within scope of DORA since January 2025 and of Finansinspektionen’s regulations, and the demands on operational resilience, incident reporting and third-party governance are concrete rather than abstract.
There is also a dense concentration of public bodies and municipally owned companies, where the Swedish Cybersecurity Act governs instead — with requirements on management involvement, risk work and reporting to the NCSC. And a growing technology and SaaS sector where the question is more often a customer’s security requirements in a procurement than a regulation: an ISO 27001 certification is then what opens the deal.
What we help with
Information security and governance
ISO 27001 management systems, gap analysis against NIS2 and DORA, risk work and continuity.
Read more →Data protection and privacy
GDPR current-state analysis, external data protection officer, DPIAs and breach preparedness.
Read more →Cybersecurity and technical security
Secure architecture, hardening, vulnerability management and penetration testing.
Read more →IT services and advisory
IT operations, architecture, support and Microsoft 365 — as a project or as ongoing responsibility.
Read more →Manager as a Service
Interim CISO, interim IT manager and security lead, with a planned handover.
Read more →All offers
Defined engagements with a clear delivery, from gap analysis to internal audit.
Read more →Within IT we help organisations in Malmö with IT operations, IT support and service desk, Microsoft 365, networks and backup.
How we work in Malmö
We work from the office in Bjärred, roughly 20 kilometres from central Malmö. That means we can be on site the same day when it is needed — for workshops, management reviews, incident exercises and audits — and work remotely in between. Most engagements run well as a mix, but what needs people in the same room should happen in the same room.
We work across Skåne. We have separate pages for Lund, Helsingborg and the area around our office, Kävlinge, Löddeköpinge, Lomma and Bjärred.
Frequently asked questions
Do you work on site in Malmö?
Yes. We are based in Bjärred, about 20 kilometres from Malmö, and are on site when the work calls for it — workshops, interviews, audits and exercises. Analysis, documentation and follow-up are usually done remotely.
Are financial companies in Malmö covered by DORA or by the Cybersecurity Act?
Banks, insurers, payment service providers and other financial companies follow DORA for ICT risk and incident reporting. The Cybersecurity Act gives way in those parts, but other obligations under the Act, such as registration, may still apply. ICT suppliers to the financial sector meet DORA through their customers’ contracts. We explain the difference in the guide DORA or NIS2 – which applies to you?.
Does a SaaS company need ISO 27001?
Not by law, but customers often require it in procurements, and a certification shows that the security work is systematic. For a smaller organisation the road to ISO 27001 certification takes at best up to twelve months.
Want to know what an engagement would look like for you?
Contact us