Lokale Präsenz · Island

Cybersicherheits-Services in Island

Cybersecurity · NIS2 (EEA) · GDPR · CERT-IS coordination

EEA-grade cybersecurity for Island — coordinated with CERT-IS.

From Hafnarfirði, we support Icelandic organisations adopting NIS2 via the EEA framework, complying with Persónuverndarlög (Island's GDPR transposition enforced by Persónuvernd), und coordinating with CERT-IS during significant incidents. Island's small but highly digital economy faces concentrated risk — a few core banks under FME (Fjármálaeftirlitið) supervision, energy operators on a single-island grid, und a tourism sector dependent on always-on platforms. The EEA NIS2 transposition introduces formal essential und important entity obligations for the first time. We bring Nordic-region delivery experience, EEA data residency, und SOC capacity in Stockholm und Zoetermeer.

Regulatorisches Umfeld

Isländische und EWR-Frameworks im Geltungsbereich

NIS2 (EEA transposition)

Island implements NIS2 via the EEA agreement; essential und important entity obligations enforced by sector authorities.

Persónuverndarlög

Icelandic Data Protection Act (lög nr. 90/2018) enforced by Persónuvernd; 72-hour breach notification.

CERT-IS coordination

Island's national CERT under the Electronic Communications Office; incident reporting und threat advisories.

FME guidance

Fjármálaeftirlitið — operational resilience und ICT risk supervision for Icelandic banks und insurers.

EU regulations via EEA

DORA, eIDAS, und broader EU cyber acquis applied through the EEA Joint Committee.

72 hours

GDPR breach notification

Quelle: Persónuvernd

Concentrated

Domestic ISP/operator population

Quelle: Fjarskiptastofa

Active since 1994

EEA membership

Quelle: EFTA

Financial servicesEnergy & geothermalTourism & hospitality techPublic sector

So arbeiten wir in Island

KI-Sicherheit & Guardrails

EU AI Act adoption through the EEA agreement, Persónuvernd-aligned data protection guardrails, und ISO 42001 governance for Icelandic AI und analytics projects.

Mehr erfahren

Anwendungssicherheit

Application und API security testing for Icelandic SaaS und online banking platforms.

Mehr erfahren

Cloud-Sicherheit

Cloud architecture reviews und EEA data-residency advisory for organisations balancing scale with sovereignty.

Mehr erfahren

SOC 24×7

24×7 detection from EEA SOCs with CERT-IS coordination und Icelandic incident reporting flows.

Mehr erfahren

GRC

NIS2 readiness, Persónuverndarlög alignment, ISO 27001, und FME-ready resilience programmes.

Mehr erfahren

FAQs · Island

Is NIS2 already in force in Island?

Island adopts NIS2 through the EEA framework. Sector authorities are formalising obligations for essential und important entities. Early-readiness work pays off ahead of national-law commencement.

Where does our data sit?

Telemetry und case data remain inside the EEA — primarily processed in our Stockholm und Zoetermeer SOCs. Cross-border transfer outside the EEA only with documented safeguards.

How do you operate alongside Icelandic regulators?

Our SOC drafts incident notifications und evidence packs in English. For Persónuvernd, CERT-IS, or FME submissions that require Icelandic, we coordinate with translation specialists und your local counsel to file on time.

Erreichen Sie unser Island-Advisory-Team

Whether you are mapping NIS2 obligations, responding to a CERT-IS advisory, or preparing for an FME review, we respond within one business day.

Island

Fornubúðir 5, 220 Hafnarfirði,
Hafnarfirði, Island
Telefon: +354 662 8660
reykjavik@thegatewaydigital.com