Knowledge, guidance and practical insights from Kristensson i Skåne AB.
How to turn a classification model into Microsoft Purview: sensitivity labels, content marking, encryption, container labels, auto-labelling, DLP and licensing.
The Swedish Cybersecurity Act and DORA both require management to be trained. What the requirements mean, where they differ, what the training should contain and how to document it for supervision.
Gap analysis, internal audit, control testing and pre-audit answer different questions. How to choose the right review depending on where you are in your ISO 27001 journey.
Paying for Microsoft 365 licences you do not need? How to work with usage data, licence profiles, security dependencies and ongoing licence optimisation.
A flat network lets problems and attacks spread. How to separate clients, servers, IoT, guests and critical systems and control the traffic between them.
Information classification should lead to the right security measures, not yet another spreadsheet. How to classify confidentiality, integrity and availability and put the result into practice.
The price of IT support says little unless you know what responsibility is included. How to compare service desk scope, support levels, SLAs, pricing models and the provider's actual responsibility.
Before you write the next AI policy, you need to know how AI is actually used. How to build an AI register for risk, GDPR and the AI Act – and make shadow AI visible.
A termination clause is not an exit plan. How to build and test a practical exit strategy for data, integrations, identity and continuity – with DORA as a concrete requirement.
How do you know your security controls actually work? On designed, implemented and operationally effective controls, evidence without administration, and risk-based control testing.
