Location

IT and information security consultant in Lund

Kristensson i Skåne AB works with organisations in Lund on information security, data protection and IT — particularly where research data, patient data or medical technology raises requirements beyond the ordinary.

What characterises Lund

Lund is life science and medical technology, research and university spin-offs. That produces a set of requirements unlike the rest of the region: medical devices fall under the MDR and often under ISO 13485, and other products with digital elements, which are not medical devices, fall under the Cyber Resilience Act instead, with its demands on secure development, vulnerability handling and technical documentation.

At the same time, large volumes of sensitive personal data are handled here — health data, research data, details of study participants. That makes data protection a core question rather than a formality, with impact assessments and records of processing as recurring work. For companies growing out of the startup phase, ISO 27001 is often the first thing customers ask for.

What we help with

Information security and governance

ISO 27001 management systems, gap analysis against NIS2 and DORA, risk work and continuity.

Data protection and privacy

GDPR current-state analysis, external data protection officer, DPIAs and breach preparedness.

Cybersecurity and technical security

Secure architecture, hardening, vulnerability management and penetration testing.

IT services and advisory

IT operations, architecture, support and Microsoft 365 — as a project or as ongoing responsibility.

Manager as a Service

Interim CISO, interim IT manager and security lead, with a planned handover.

All offers

Defined engagements with a clear delivery, from gap analysis to internal audit.

Within IT we help organisations in Lund with IT operations, IT support and service desk, Microsoft 365, networks and backup.

How we work in Lund

Lund is about 12 kilometres from Bjärred, which is a shorter trip than many people have to their own office. We are on site when the work calls for it — risk workshops, interviews ahead of a gap analysis, audits — and work remotely when it does not. For smaller companies where nobody holds security as a full-time role, the arrangement is often recurring half-days rather than a project with a start and an end.

We work across Skåne. We have separate pages for Malmö, Helsingborg and the area around our office, Kävlinge, Löddeköpinge, Lomma and Bjärred.

Frequently asked questions

Do you work on site in Lund?

Yes. We are based in Bjärred, about 12 kilometres from Lund, and are on site when the work calls for it — workshops, interviews, audits and exercises. Analysis, documentation and follow-up are usually done remotely.

How do the MDR and cybersecurity fit together?

The MDR, Regulation (EU) 2017/745, sets information security requirements for medical devices with software throughout their life cycle. That is why products covered by the MDR are excluded from the Cyber Resilience Act. Anyone developing other digital products, such as an app or service that is not a medical device, may however be covered by the CRA.

How do we handle health data and research data under the GDPR?

Data concerning health are special categories of personal data under Article 9 of the GDPR and may only be processed under one of the exceptions there. Processing on a large scale requires a data protection impact assessment (DPIA) before it starts. Begin with the record of processing and the most sensitive flows.

Reviewed by Kristensson i Skåne AB. Last updated 4 October 2026.

Want to know what an engagement would look like for you?