We protect identities, devices and information, and help you meet ISO 27001 and NIS2. Concrete, prioritised and right-sized.
Blue Space
We help small and mid-sized companies get the protection they already pay for in Microsoft 365, and build an information security management system that holds up when a customer, an auditor or an attacker comes knocking.
Why now
Larger customers send security questionnaires and want to see that access, devices and information are under control before they sign.
The Swedish Cybersecurity Act (NIS2) has been in force since 15 January 2026. It requires risk management and incident reporting, and the requirements reach suppliers too.
Many breaches start with stolen credentials or an unmanaged computer. Microsoft 365 includes plenty of protection against both; it just isn't always turned on.
We review the configuration and give you a prioritised list: what matters most, how much work it is and who does what.
MFA, Conditional Access and protected admin accounts.
Computers and phones in Intune, protected with Defender.
Labels and rules that follow the information, not just the folder.
A management system you can live with, from gap analysis through to the audit.
Find out whether the Cybersecurity Act applies to you and what it requires if it does, with a risk analysis management can act on.
Approach
We go through your environment, existing documentation and the requirements you need to meet.
You get an action plan sorted by risk and effort, written for both management and IT.
We implement the measures together with your IT team, step by step and without unnecessary disruption.
We check that the measures work and keep the level up over time, with documentation that stands up to an audit.
How we can work together
Assessment
A clear picture of how secure your Microsoft 365 environment is today, and what to do first.
Fixed scope · quote after the first call
Book a first callProject
We implement the measures together with your IT team, in the order that makes the biggest difference.
Quote per project
Discuss a projectOngoing
Security support that keeps the level up, without you having to hire your own specialist.
Monthly retainer, sized to your needs
Talk about ongoing supportEvery engagement starts with a free first call. You get a quote with a clear scope before any work begins.
Security Check
Ten questions about identity, devices, information and governance. You get a result and suggestions on where to start. Answers are not saved and never leave your browser.
Start the Security Check →Not necessarily. Many companies already have Microsoft 365 Business Premium or E3/E5 and use only part of the protection included. We start with what you have and tell you if a licence would make a real difference.
No. We are happy to work alongside your IT provider. We bring the security perspective and set the priorities; they handle day-to-day operations. If it suits you better, we can implement the measures ourselves.
It depends on sector and size. The Act mainly covers medium-sized and large organisations in certain sectors, but the requirements often reach smaller companies through customers who are covered. We help you work out what applies to you.
No, certification is done by an accredited certification body. We help you build the management system and prepare so the audit goes smoothly.
It depends on the size of the environment and what the assessment should cover. After the first call you get a proposal with scope and timeline.
Not much. We need read access to your Microsoft 365 environment and a contact who knows the business. We tell you exactly what is needed before we start.
Contact
Tell us briefly about your environment and what you want to achieve. We work with customers across Sweden, remotely or on site. The first call is free and without obligation.