Blog

Blog series on NIS2 and the cybersecurity law

NIS2 and the Swedish Cybersecurity Act are not a desk exercise. They are a reality check. They don't care how polished your policy is when the network falters, two key personnel are absent, and the supplier says "back after lunch". Then only one question remains: do you have capability or just folders?

That's why I've written a blog series that fills a gap I've noticed in the debate: it translates NIS2 into controls, vulnerabilities and capabilities. Not just "compliance theatre", but what can actually be measured, practised and demonstrated.

The unique aspect? Each article takes a requirement and makes it human and practical with a clear metaphor (no lists of fifteen items or buzzwords). You get a compass for what truly matters: leadership responsibility, incident alerts, continuity, supply chain, vulnerabilities, measurable impact, cyber hygiene, authentication – the whole chain. And it comes with a vision I believe more need: that NIS2 can become a competitive advantage once we stop counting PDFs and start building muscle memory.

Read it if you want NIS2 to feel less like a "must" and more like "now I get it".

OneMore Secure

Securing supply chains - a practical guide

This guide helps organisations strengthen their cybersecurity in the supply chain through structured risk management, setting requirements, and monitoring.

The method is divided into three areas:

• Understand the risks - Map and analyse security risks in the supply chain.

• Gain control – Create and maintain security requirements for suppliers.

• Build resilience – Develop continuous security improvements and incident management.