Operators and large clients across Northern Europe are pushing cyber requirements into technical specifications, supplier audits and project contracts. I help industrial contractors see where they stand, close the critical gaps and produce the documentation their customers expect.
Operators such as Aker BP and Equinor are driving most of these requirements. Contractors and vendors increasingly need to demonstrate compliance throughout project execution, not just at initial qualification.
Companies that receive, or expect to receive, cybersecurity requirements from enterprise clients, and don't have a dedicated IT or security team to answer them.
Who I work with
Typically 20 to 500 employees, in Norway, Finland, Sweden, Denmark and Estonia.
When companies usually come to me
Your HSEQ, quality and project teams are being asked to handle requirements that didn't exist five years ago.
Operators and major energy clients now write cybersecurity requirements directly into technical specifications. Answering them is becoming a condition of contract award, and contractors who can't answer risk their place on approved vendor lists.
A supplier questionnaire usually reaches a quality manager, HSEQ manager or operations director. They're experienced, but cybersecurity isn't their background. The result is slow answers, wrong answers, or expensive consultants who don't know your operations.
Operators ask again during project execution, in supplier audits and at handover. Contractors need documentation they can reuse, not a one-off questionnaire response.
Norway's Digital Security Act has applied since October 2025 and requires covered companies to follow up the security of their suppliers. NIS2, which adds management accountability and covers more sectors, is expected to follow in Norway. Most contractors don't yet know whether they're in scope.
A structured, written assessment of your company's cybersecurity posture, delivered as a report you can use with customers, management and auditors. Not an automated checklist: I prepare every report and review every finding myself.
Built on the Enteliq Industrial Assurance Framework v1.0 and mapped to NIS2, ISO 27001 and IEC 62443.
Coming next: an ongoing compliance and evidence platform with a questionnaire assistant, evidence library and project compliance tracker. Pilot clients get early access.
Designed to help you
Nothing to install, nobody on site, no meetings. Everything is handled in writing.
Fill in the short form. I review your industry, client requirements and context, and confirm scope by email within 2 business days.
You get a one-page proposal with scope, timeline and price. Pay by invoice or card via Stripe. The NDA is signed at this stage.
You complete a structured questionnaire covering 12 areas. I assess your answers and follow up in writing if anything is unclear.
You receive the 20-page report as a PDF with a summary of key findings, within 7 business days. Questions afterwards are answered by email.
If I can't deliver within 7 business days, I extend your engagement at no extra cost. Your information is never shared with third parties.
This is an excerpt from a sample report written for a fictional contractor. It shows the structure and level of detail of a real assessment.
The full report adds detailed findings, impact estimates, the complete action plan and the 90-day roadmap.
Fictional company: industrial maintenance contractor, 48 employees, marine services, Norway
NIS2: 4 of 10 requirements met
Every report is prepared and reviewed by me personally before it reaches you.
Every assessment is covered by a non-disclosure agreement.
A shipyard is not an IT company. The assessment reflects how contractors actually operate.
No tools, no agents, no IT involvement. You answer a questionnaire; I do the rest.
From completed questionnaire to full report, or I extend the engagement at no cost.
Scope, questions and delivery are all handled in writing, on your schedule.
Founding client pricing is available to a limited number of pilot companies. Standard pricing applies after the pilot phase.
Every assessment includes the 20-page Cyber Readiness Report, an NDA and written Q&A after delivery. Payment by invoice or card.
Jan KornejevFounder, Enteliq · 6 years on Norwegian yard projects
I've spent 6 years as an industrial electrician on Norwegian yard projects: Hugin A and Johan Castberg at Aker Solutions Stord, and Westcon before that. I've seen how operator requirements travel down to the subcontractors who build the equipment, and how cybersecurity questionnaires now land on HSEQ desks with no one trained to answer them.
Enteliq is my answer to that gap: a written, structured assessment for industrial contractors, mapped to NIS2, ISO 27001 and IEC 62443. I run every assessment myself, and everything is handled in writing. No sales calls.
If your customers are starting to ask about cybersecurity, you bring the operational context and I deliver the assessment, the report and the documentation you need.