Interim IT leadership that takes charge when it counts.

NIS2 applies to medium and larger organizations (roughly 50 employees or more, or over EUR 10 million in turnover) in sectors such as energy, transport, health, drinking and waste water, digital infrastructure, public administration, post, waste, chemicals, food, manufacturing and digital services. Some smaller entities are still covered if they are deemed critical. We help you make the assessment.

The NIS2 directive was to be transposed into national law by 17 October 2024. In Sweden this is being implemented through a new cybersecurity act that has been delayed. Follow the Government Offices and MSB for the exact date. The requirements cover far more organizations than before, so preparation should start now.

NIS2 sets requirements for risk management, incident reporting, continuity and management-level accountability for organizations classed as important or essential. We help you determine whether you are in scope and produce an action plan that covers the requirements.

GDPR protects personal data. NIS2 is about operational security and resilience in essential and important services. They overlap in the security work but have different supervision and different requirements. We help you handle both in one action plan.

The CRA sets security requirements for products with digital elements sold in the EU: both for the product itself and for how vulnerabilities are handled across the lifecycle. If you build or sell such a product, you should start adapting now.

The CRA entered into force in 2024. Vulnerability reporting obligations start after about 21 months and the full product requirements after 36 months. Start by inventorying which of your products are in scope, build in security from the start, set up a vulnerability-handling process and prepare technical documentation.

Yes. Much of the security and governance work is shared, so we produce one action plan that covers both regulations instead of running them as two separate tracks.

Yes. We can take the role of acting IT manager or provide IT expertise on the leadership team, full or part time, until you have a permanent solution in place.

Common situations are an IT manager who is leaving, a recruitment that needs bridging, a parental leave, an acquisition, or a larger transformation or security project that needs to be led. An interim IT manager keeps momentum and decision-making going through the transition.

It depends on scope and time: part time or full time, the length of the engagement and how much operational responsibility the role carries. We give a fixed quote after an initial call.

No. Nisenta is our own platform for ongoing compliance, but advisory and development engagements are entirely separate. Many combine them, but it is not a requirement.

Yes. We build custom software and internal tools and use AI to shorten the path from idea to production, with the same requirements on architecture, security and review as always.