Latest news
- Information security consultant and interim CISO in Skåne – senior expertise close to the business
Sometimes a senior consultant for a defined task, sometimes an interim CISO leading the security work for a period. Kristensson i Skåne offers both – with local presence in Malmö, Lund, Helsingborg and the rest of Skåne. - GDPR consultant, DPO support and DPIA – data protection you can maintain
GDPR work does not have to be a constant documentation project. Senior consulting in GDPR, DPO support and DPIA – structured, completed and possible to maintain over time. Clients across Sweden, with local presence in Skåne. - IT consultant in Malmö, Lund and Helsingborg with a focus on secure Microsoft 365
Microsoft 365 is at the heart of everyday work – but identity, email, sharing and logging need to be configured correctly. Kristensson i Skåne helps companies in Malmö, Lund, Helsingborg and the rest of Skåne with a security-oriented review of Microsoft 365. - New partner – Nimblr
Kristensson i Skåne AB has partnered with Nimblr and now offers their security awareness services as part of our overall security portfolio. Nimblr is a Swedish-built security awareness… Read more: New partner – Nimblr
Latest insights
- DORA’s first incident data shows: not every serious IT incident starts with a cyberattack
DORA’s first aggregated incident data: system and process failures and third-party dependencies account for most serious ICT incidents – only about 10% were cyber-related. How to build broader operational resilience. - Five common mistakes in working with the Cybersecurity Act (NIS2)
The Swedish Cybersecurity Act is in place. The question is less about when NIS2 arrives and more about how the requirements become effective security work. Here are five common mistakes that create a lot of documentation but too little actual risk reduction. - Five things to check before 1 October – new requirements under the Cybersecurity Act
On 1 October 2026, new regulations on security measures and management training take effect. Five areas to check now – from management responsibility and risk to continuity, suppliers and follow-up. - Incident triage – when an incident requires more than incident handling
An incident is rarely just an incident. Incident triage helps you decide what needs to be activated, who to involve and which deadlines are already running – connecting incident, continuity, recovery, crisis and reporting. - Cyber threat information sharing under DORA – from regulatory requirement to practical approach
DORA Article 45 enables – but does not require – cyber threat information sharing between financial firms. How to make it a practical approach that creates value. - Operational resilience: from regulatory requirement to working capability
Operational resilience is a management and supplier issue – not just IT. Starting from Sweden’s FI 2026:1 stability report: how to move from requirement to a capability that holds.