Security and compliance that work in practice
Secudan helps SMEs and municipalities with cybersecurity, GDPR and NIS2. We turn legal requirements into practical, manageable solutions – and stay until they work.
- Independent – we don't sell products
- Free first meeting, no obligation
- Tailored to SMEs and municipalities
We work with
- GDPR
- NIS2
- ISO 27001
- ISO 27002
- CIS Controls
- D-seal
- DORA
Services
What we can help with
We cover the full spectrum, from technical cybersecurity to compliance and organisational maturity.
Cybersecurity
Technical security assessments, penetration testing, vulnerability scanning and implementation of security controls. We find the weaknesses before attackers do.
- Security analysis
- Vulnerability management
- Technical risk assessment
GRC – Governance, Risk & Compliance
We help you build a coherent GRC framework that supports management decisions and ensures compliance with applicable legislation and standards.
- Risk management
- Policies & procedures
- ISO 27001 / DORA
GDPR & Data Protection
Complete GDPR compliance, from gap analysis to implementation. We identify, document and remediate – and make sure you can always demonstrate your compliance.
- Gap analysis
- DPIA
- Data processing agreements
NIS2 Implementation
The NIS2 Directive places new requirements on many Danish organisations. We help you map your obligations and implement the necessary measures.
- Scope assessment
- Incident response plan
- Supplier management
Awareness & Training
Human error is behind most security incidents. Our training programmes build a strong security culture across the whole organisation.
- Security training
- Phishing simulation
- E-learning
Security Audit
An independent review of your security measures, policies and technical setup. Ideal as preparation for certification or as an ongoing check.
- Auditing
- Control environment review
- Management reporting
Packages
Fixed packages – ready for you
Our most requested services, gathered in three packages. Every package is adapted to your situation, and the price is agreed after a free introductory meeting.
GDPR Package
Become compliant – and stay that way
A complete package for organisations that want full GDPR compliance. From analysis to implementation and ongoing maintenance.
- GDPR gap analysis and status report
- Record of processing activities
- Review of data processing agreements
- Privacy policy and consent management
- DPIA for critical processing
- Policies and internal procedures
- Employee training
- Quarterly follow-up meetings
NIS2 Package
Meet the NIS2 requirements with peace of mind
The Danish NIS2 Act is in force and places stricter requirements on many companies and authorities – including personal liability for management. We guide you safely through it.
- Screening: are you covered by NIS2?
- Gap analysis against the NIS2 requirements
- Risk assessment and treatment plan
- Incident response and incident reporting
- Supplier management and supply chain
- Documentation for the supervisory authority
- Management training and board briefing
- Ongoing compliance follow-up
Awareness Package
Make your employees your strongest link
Human error is the most common cause of security incidents. Our awareness programme builds a solid security culture.
- Measurement of your current security culture
- Tailored awareness programme
- Interactive workshops and e-learning
- Phishing simulation (3 campaigns)
- Policies and behavioural guidelines
- Management briefing and reporting
- Measurement of impact and progress
- Continuously updated content
Need something else? We also take on bespoke assignments – get in touch for an informal chat.
Process
From first conversation to documented compliance
A simple, transparent process in four steps. You always know what the next step is – and what it costs.
- 1
Free introductory meeting
We listen to your situation, requirements and concerns. About 45 minutes – online or at your office.
- 2
Analysis
We map where you stand today against legal requirements and good practice – and where the risk is greatest.
- 3
Action plan
You get a prioritised, realistic plan at a fixed price – so you know exactly what will happen and when.
- 4
Implementation & follow-up
We carry out the measures together with you and follow up, so compliance lasts over time.
Why Secudan
Advice you can trust
We are a small, specialised team – which gives you direct access to experienced consultants without unnecessary layers.
Concrete results
We don't stop at the report. We work with you until the implementation is in place and you can document your compliance.
Independent advice
We are not tied to any vendors or products. Our recommendations are based 100% on what is best for your organisation.
Business understanding
Good security supports the business. We make sure security measures are proportionate and don't needlessly get in the way of your operations.
Quick start
We can usually start within a few weeks. If you have urgent compliance requirements or an upcoming audit, we prioritise you.
Ready to strengthen your security?
Book a free introductory meeting. We listen to your situation and tell you what we can do for you – with no obligation.
Book a free meetingAbout Secudan
Practical security from experienced specialists
Secudan is a Danish consultancy specialising in cybersecurity and GRC – Governance, Risk and Compliance. We believe good security doesn't have to be complicated or overwhelming.
We combine deep technical knowledge with business understanding. That means we don't just deliver reports – we implement solutions that hold up in practice and give you and your customers real peace of mind.
SMEs
Proportionate security measures that match both budget and risk profile – without requiring a full-time security department.
Municipalities & public organisations
Public authorities are subject to special requirements. We know the legislation and help you with NIS2, GDPR and ISO 27001.
How we work
Four principles in everything we do
Proportionate
Measures that fit your size, risk and budget.
Hands-on
We implement – we don't just report.
Plain language
No jargon. Management understands what needs to be done and why.
Independent
We sell no products – only our expertise.
FAQ
Frequently asked questions
Is our organisation covered by NIS2?
As a rule, NIS2 covers medium-sized and large organisations (50+ employees or more than EUR 10 million in turnover) in a range of critical and important sectors – such as energy, transport, health, digital infrastructure, food, waste and manufacturing – as well as public authorities. Smaller companies can also be affected indirectly as suppliers. We do a quick screening so you get a clear answer.
What does it cost?
It depends on your size and starting point. After the free introductory meeting you receive a specific quote at a fixed price, so there are no surprises along the way.
How long does it take?
A GDPR or NIS2 gap analysis typically takes 2–4 weeks. The full implementation depends on the scope – for many SMEs the most important measures are in place within 2–4 months.
We are a small company – is this even relevant for us?
Yes. Small companies are often targeted by phishing and ransomware precisely because they are less protected. We scale the effort so it is proportionate – you get the measures that give the most security for your money.
Do we need technical knowledge ourselves?
No. We translate the requirements into plain language and work with your IT manager or IT supplier on the technical parts.
Do you sell software or products?
No. We are independent and make no money from recommending particular products. Our advice is based solely on what is best for you.
Contact
Book a free, no-obligation meeting
Tell us briefly what you need, and we'll get back to you within one business day.
What you get from the meeting
- An assessment of which requirements apply to you
- An overview of your biggest risks
- Concrete suggestions for next steps
- No commitment – and no sales pitch