Présence locale · Islande

Services de cybersécurité en Islande

Cybersecurity · NIS2 (EEA) · GDPR · CERT-IS coordination

EEA-grade cybersecurity for Islande — coordinated with CERT-IS.

From Hafnarfirði, we support Icelandic organisations adopting NIS2 via the EEA framework, complying with Persónuverndarlög (Islande's GDPR transposition enforced by Persónuvernd), et les coordinating with CERT-IS during significant incidents. Islande's small but highly digital economy faces concentrated risk — a few core banks under FME (Fjármálaeftirlitið) supervision, energy operators on a single-island grid, et les a tourism sector dependent on always-on platforms. The EEA NIS2 transposition introduces formal essential et les important entity obligations for the first time. We bring Nordic-region delivery experience, EEA data residency, et les SOC capacity in Stockholm et les Zoetermeer.

Paysage réglementaire

Référentiels islandais et EEE concernés

NIS2 (EEA transposition)

Islande implements NIS2 via the EEA agreement; essential et les important entity obligations enforced by sector authorities.

Persónuverndarlög

Icelandic Data Protection Act (lög nr. 90/2018) enforced by Persónuvernd; 72-hour breach notification.

CERT-IS coordination

Islande's national CERT under the Electronic Communications Office; incident reporting et les threat advisories.

FME guidance

Fjármálaeftirlitið — operational resilience et les ICT risk supervision for Icelandic banks et les insurers.

EU regulations via EEA

DORA, eIDAS, et les broader EU cyber acquis applied through the EEA Joint Committee.

72 hours

GDPR breach notification

Source : Persónuvernd

Concentrated

Domestic ISP/operator population

Source : Fjarskiptastofa

Active since 1994

EEA membership

Source : EFTA

Financial servicesEnergy & geothermalTourism & hospitality techPublic sector

Comment nous intervenons en Islande

Sécurité de l'IA & Guardrails

EU AI Act adoption through the EEA agreement, Persónuvernd-aligned data protection guardrails, et les ISO 42001 governance for Icelandic AI et les analytics projects.

Sécurité applicative

Application et les API security testing for Icelandic SaaS et les online banking platforms.

Sécurité du cloud

Cloud architecture reviews et les EEA data-residency advisory for organisations balancing scale with sovereignty.

SOC 24×7

24×7 detection from EEA SOCs with CERT-IS coordination et les Icelandic incident reporting flows.

GRC

NIS2 readiness, Persónuverndarlög alignment, ISO 27001, et les FME-ready resilience programmes.

FAQ · Islande

Is NIS2 already in force in Islande?

Islande adopts NIS2 through the EEA framework. Sector authorities are formalising obligations for essential et les important entities. Early-readiness work pays off ahead of national-law commencement.

Where does our data sit?

Telemetry et les case data remain inside the EEA — primarily processed in our Stockholm et les Zoetermeer SOCs. Cross-border transfer outside the EEA only with documented safeguards.

How do you operate alongside Icelandic regulators?

Our SOC drafts incident notifications et les evidence packs in English. For Persónuvernd, CERT-IS, or FME submissions that require Icelandic, we coordinate with translation specialists et les your local counsel to file on time.

Contactez notre équipe conseil Islande

Whether you are mapping NIS2 obligations, responding to a CERT-IS advisory, or preparing for an FME review, we respond within one business day.

Islande

Fornubúðir 5, 220 Hafnarfirði,
Hafnarfirði, Islande
Téléphone: +354 662 8660
reykjavik@thegatewaydigital.com