Independent Cybersecurity Advisory
Strategic cybersecurity advice for businesses and leadership teams. I help you understand your real exposure, cut through the noise, and make confident security decisions.
No vendor ties. No reselling. No implementation agenda. Independent judgment.
About
Independent Cybersecurity Advisor
I spent over a decade in cybersecurity on the execution layer. Risk assessments, audits, security awareness, penetration testing, data protection, compliance projects. I know that world inside out. I also know what happens when organisations treat security as a checkbox rather than a strategic asset.
Today I operate differently. I help leadership teams, founders, and boards understand their real exposure, cut through vendor noise, and make security decisions from a position of clarity rather than obligation.
I bring insight. I advise on what to prioritise, what to invest in, and which risks to accept. How to navigate compliance requirements without becoming constrained by them.
I don't have a vendor agenda. I don't resell software, licenses, or tools, therefore I hold no financial stake in what I recommend.
I practice under the business name Ørnsyn. In Norwegian, ørn means eagle and syn means sight. It reflects my approach. A higher perspective, focus on priorities and effective decisions.
How I work
My approach applies best practices grounded in ISO 27001/02, NIST CSF, CIS Controls, and NSM's ICT Security Principles.
I take time to understand your situation and the challenge you're facing. I ask direct questions and tell you how I can help, or point you forward if I'm not the right fit. Either way, you leave with a direction on the next steps.
We agree on scope, format, and timeline upfront. Whether a session, a project, or an ongoing arrangement. Pricing is agreed before we begin. Nothing is left open-ended.
You leave with a sharp view of what matters, actionable recommendations, and genuine feedback. The decisions and implementation are yours. I will make sure you know what to do next.
What I offer
Cybersecurity is full of noise. A decade in the field taught me what actually matters and how to act on it.
You have a specific decision to make, a vendor to evaluate, a tool to assess, or a risk whose significance is unclear. I offer a focused session, my honest read, and advice you can actually act on.
Session-based or ongoingYour organisation is already using AI tools. The risk is often underestimated. I help you see where that exposure actually sits, and what to do about it.
Session-based or ongoingMost risk assessments end up as documents, not action. I provide a prioritised roadmap you can actually follow. Structured risk identification, clear-eyed scoring, and actionable recommendations on what to fix first and what to accept.
Compliance engagements available for NIS2, GDPR, EU AI Act, and DORA.
Engagement-basedNo implementation, audits, penetration testing, policy writing, or incident response. These are important services, but not mine. If that is what you need, I am happy to point you toward the right people.
Rate Card · 2026
Custom engagements are scoped individually to fit your need.
Not sure where to start? Begin with a discovery call. A direct look at what you're facing, before anything is priced.
Advisory
Focused conversations for specific problems, decisions, or situations where you need expert insight.
Cybersecurity Advisory
A focused conversation with you or your team to address a specific challenge, decision, or question. Typically 90 minutes, includes my preparation beforehand.
AI Security Advisory
A focused conversation with you or your team to address an AI-specific challenge, decision, or question. Typically 90 minutes, includes my preparation beforehand.
Trusted Advisory
Input on key decisions and risks. An independent perspective for decisions where judgment matters. Typically an ongoing advisory relationship.
Assessment
For organisations that need a structured view of their security risks and compliance obligations, and a direction on what to address specifically.
Cybersecurity Risk Assessment
OrganisationalKnow where you stand and what to fix first. Key cybersecurity risks, gaps, and exposures turned into priorities and actionable recommendations.
AI Risk Assessment
AI AdoptionKnow where AI is actually putting your organisation at risk. Governance, visibility, data handling, access, supply chain, and regulatory standing.
Compliance Advisory
NIS2 · GDPR · EU AI Act · DORAWhat the regulatory requirements mean for your organisation. Where the gaps are. What to prioritise and in what order.
Investment
Independent advice on where security investment matters most.
Cybersecurity Investment Review
Evaluate a specific vendor or technology, challenge a proposed investment, or review your security investments as a whole to identify priorities, gaps, duplication, and opportunities to improve value.
All prices are net amounts. VAT is charged where applicable.
Contact
First conversation is a direct look at your situation and whether I can help. No pitch, no sales agenda. If I'm not the right fit, I'll point you in the right direction.
Discovery call · No chargeAvailable across Norway and internationally. Sessions in English or Norwegian.
Remote or on-site. Your preference.